File Access Control Library Functions               aclget(3SEC)



NAME
     aclget, faclget, aclset, faclset - get or set  a  file's
     Access Control List (ACL)

SYNOPSIS
     cc [ flag... ] file... -lsec [ library... ]
     #include 

     int *aclget(const char *path, int flag, aclt **aclp);


     int *faclget(int fd, int flag, aclt **aclp);


     int aclset(const char *path, aclt *aclp);


     int faclset(int fd, aclt *aclp);


DESCRIPTION
     The aclget() and faclget() functions  retrieve  an  Access
     Control  List (ACL) of a file whose name is given by path or
     referenced by the open file descriptor fd. The flag argument
     specifies  whether  a  trivial ACL should be retrieved. When
     the flag argument is ACLNOTRIVIAL, only ACLs that are  not
     trivial  will  be retrieved. The ACL is returned in the aclp
     argument.


     The aclset() and faclset() functions are used for  setting
     an  ACL  of a file whose name is given by path or referenced
     by the open file descriptor fd. The aclp argument  specifies
     the ACL to set.


     The aclget() and aclset() functions support multiple types
     of  ACLs.   When possible, the aclset() function translates
     an ACL to the target file's style of ACL. Currently this  is
     only  possible  when translating from a POSIX-draft ACL such
     as on UFS to a file system that supports NFSv4 ACL semantics
     such as ZFS or NFSv4.

RETURN VALUES
     Upon successful completion, aclget() and faclget()  return
     0  and aclp is non-NUL. The aclp argument can be NUL after
     successful completion if the file had a trivial ACL and  the
     flag  argument was ACLNOTRIVIAL. Otherwise, -1 is returned
     and errno is set to indicate the error.






SunOS 5.11           Last change: 6 Oct 2005                    1






File Access Control Library Functions               aclget(3SEC)



     Upon successful completion, aclset() and faclset()  return
     0.  Otherwise,  -1  is returned and errno is set to indicate
     the error.

ERORS
     These functions will fail if:

     EACES     The caller does not have access to a component of
                path.


     EIO        A disk I/O error has occured while retrieving the
                ACL.


     ENOENT     A component of the path does not exist.


     ENOSYS     The file system does not support ACLs.


     ENOTSUP    The ACL supplied could not be  translated  to  an
                NFSv4 ACL.


ATRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:



     
           ATRIBUTE TYPE               ATRIBUTE VALUE       
    
     Interface Stability          Evolving                    
    
     MT-Level                     MT-Safe                     
    


SEE ALSO
     chmod(1), acl(2), acl(5), attributes(5)













SunOS 5.11           Last change: 6 Oct 2005                    2