home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!mcsun!Germany.EU.net!ira.uka.de!gmd.de!jvnc.net!darwin.sura.net!zaphod.mps.ohio-state.edu!cs.utexas.edu!ut-emx!ibmchs!auschs!awdprime.austin.ibm.com!greenber.austin.ibm.com!jfh
- From: jfh@greenber.austin.ibm.com (John F Haugh II)
- Newsgroups: comp.unix.aix
- Subject: Re: Using ACLs (with acledit) on 3.2.0
- Message-ID: <1992Nov6.191913.4418@awdprime.austin.ibm.com>
- Date: 6 Nov 92 19:19:13 GMT
- References: <1chjstINNo3u@grasp1.univ-lyon1.fr> <1992Oct27.171655.15481@awdprime.austin.ibm.com>
- Sender: news@awdprime.austin.ibm.com (USENET News)
- Organization: AIX Software Support, Austin, Republica de Tejas
- Lines: 27
-
- In article <1992Oct27.171655.15481@awdprime.austin.ibm.com> julie@levell.austin.ibm.com (Julie L. Craft) writes:
- > I tried this with each user on a separate line, and it
- > worked fine. Check out the "acl example" in INFO.
- > There's a tag to it at the end of the acledit command.
-
- See "Genderal Concepts and Procedures", page 24-14. It describes the
- format as
-
- attributes: SUID | SGID | SVTX
- base permissions:
- owner name: mode
- group name: mode
- others: mode
- extended permissions:
- enabled | disable
- permit mode userinfo
- deny mode userinfo
- specify mode userinfo
-
- and userinfo is u:username | g:groupname | u:username,g:groupname. There
- is even a Note: if more than one user name is specified in an entry, that
- entry cannot be used in an access control decision, because a process has
- only one user ID.
- --
- John F. Haugh II | MaBellNet: (512) 823-8817 | SneakerNet: 042/2D034
- InterNet: jfh@eureka.aixserv.austin.ibm.com [TSAKC]
- Disclaimer: I am not a representative of IBM. I speak for myself only.
-