Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 11-05-2007, Руководство по установке

Страница: 304 / 982

ACL entry owner. Other class permissions are mapped to the respective ACL entry.
However, the mapping of the group class permissions is different in the two cases.
Figure 14.1 Minimum ACL: ACL Entries Compared to Permission Bits
In the case of a minimum ACL—without mask—the group class permissions are mapped
to the ACL entry owning group. This is shown in
Figure 14.1, “Minimum ACL: ACL
Entries Compared to Permission Bits” (page 286). In the case of an extended ACL—with
mask—the group class permissions are mapped to the mask entry. This is shown in
Figure 14.2, “Extended ACL: ACL Entries Compared to Permission Bits” (page 286).
Figure 14.2 Extended ACL: ACL Entries Compared to Permission Bits
This mapping approach ensures the smooth interaction of applications, regardless of
whether they have ACL support. The access permissions that were assigned by means
of the permission bits represent the upper limit for all other “fine adjustments” made
with an ACL. Changes made to the permission bits are reflected by the ACL and vice
versa.
14.4.2 A Directory with an Access ACL
With
getfacl
and
setfacl
on the command line, you can access ACLs. The usage
of these commands is demonstrated in the following example.
286 Installation and Administration