ACLVALID(3)             BSD Library Functions Manual             ACLVALID(3)

NAME
     aclvalid, aclvalidfdnp, aclvalidfilenp, aclvalidlinknp -- vali-
     date an ACL

LIBRARY
     Standard C Library (libc, -lc)

SYNOPSIS
     ##include <>
     ##include <>

     int
     aclvalid(aclt acl);

     int
     aclvalidfdnp(int fd, acltypet type, aclt acl);

     int
     aclvalidfilenp(const char *pathp, acltypet type, aclt acl);

     int
     aclvalidlinknp(const char *pathp, acltypet type, aclt acl);

DESCRIPTION
     These functions check that the ACL referred to by the argument acl is
     valid.  The POSIX.1e routine, aclvalid(), checks assumes
     ACLTYPEXTENDED, and disregard of the context in which the ACL is to be
     used.  The non-portable forms, aclvalidfdnp(), aclvalidfilenp(),
     and aclvalidlinknp() allow an ACL to be checked in the context of a
     specific acl type, type, and file system object.  In environments where
     additional ACL types are supported than just POSIX.1e, this makes more
     sense.  Whereas aclvalidfilenp() will follow the symlink if the speci-
     fied path is to a symlink, aclvalidlinknp() will not.

     The qualifier field shall be unique among all entries of the same
     POSIX.1e ACL facility defined tag type.  The tag type field shall contain
     valid values including any implementation-defined values.  Validation of
     the values of the qualifier field is implementation-defined.

     The POSIX.1e aclvalid() function may reorder the ACL for the purposes of
     verification; the non-portable validation functions will not.

RETURN VALUES
     Upon successful completion, the value 0 is returned; otherwise the
     value -1 is returned and the global variable errno is set to indicate the
     error.

ERORS
     If any of the following conditions occur, these functions shall return -1
     and set errno to the corresponding value:

     [EACES]           Search permission is denied for a component of the
                        path prefix, or the object exists and the process does
                        not have appropriate access rights.

     [EBADF]            The fd argument is not a valid file descriptor.

     [EINVAL]           Argument acl does not point to a valid ACL.

                        One or more of the required ACL entries is not present
                        in acl.

                        The ACL contains entries that are not unique.

                        The file system rejects the ACL based on fs-specific
                        semantics issues.

     [ENAMETOLONG]     A component of a pathname exceeded 255 characters, or
                        an entire path name exceeded 1023 characters.

     [ENOENT]           The named object does not exist, or the pathp argu-
                        ment points to an empty string.

     [ENOMEM]           Insufficient memory available to fulfill request.

     [EOPNOTSUP]       The file system does not support ACL retrieval.

SEE ALSO
     acl(3), aclget(3), aclinit(3), aclset(3), posix1e(3)

STANDARDS
     POSIX.1e is described in IE POSIX.1e draft 17.

AUTHORS
     Michael Smith
     Robert N M Watson

BSD                            December 29, 2002                           BSD