setfacl
The commands that set (setfacl) and show (getfacl) a file's access control list.
In more detail
setfacl -m adds or changes entries, -x removes one, -b removes them all and -d works on a directory's default entries. getfacl prints every entry with the effective rights the mask allows.
Example
setfacl -m u:audit:r payroll.csv lets one extra user read the file.Related terms
- access control list — A list on a file or folder saying which users and groups may read, change or own it.
Taught in
- Root Over SSH From Anywhere: Keys, sshd, setuid Files And Attributes — CompTIA Linux+ (XK0-006) Exam Prep
- Forbidden, With Perfect Permissions: Paths, ACL Masks And SELinux Denials — CompTIA Linux+ (XK0-006) Exam Prep