topic Re: removing setacl in Operating System - HP-UX

removing setacl

himacs — Fri, 24 Jul 2009 11:30:45 GMT

Hi gurus,

I have set setacl to a user with rwx.Now i want to modify the same with rw-. HOw it can be done.

and how to remove the set permission..

The command i used is
setacl -m user:john:rwx /test

regards
himacs

Re: removing setacl

Roopesh Francis_1 — Fri, 24 Jul 2009 11:42:21 GMT

you can try below command for modifying acl
setacl -m u:john:rw /test

for removing acl
setacl -d u:john:rwx filename.

Thanks

Re: removing setacl

Roopesh Francis_1 — Fri, 24 Jul 2009 11:47:46 GMT

check the setacl man pages for details
http://docs.hp.com/en/B3921-90010/setacl.1.html

Re: removing setacl

Mel Burslan — Fri, 24 Jul 2009 11:51:55 GMT

Why don't you just overwrite the ACL with the new permissions:

setacl -m user:john:rw- /test

to delete an ACL, use

chacl -d

command. for the exact syntax and capabilities of chacl command, use man pages for the command.

This information is from a very old time, so I can not guarantee its accuracy. Please read the man pages. And try to stay away from ACLs even how tempting they look. In the long run, you are getting yourself into a big mess, that nobody but you can deal with.

Re: removing setacl

himacs — Fri, 24 Jul 2009 12:19:23 GMT

HI

thanx for the responses..

setacl -d not happening.it gives error as unknown user.

plz provide the chacl -d format

m getting below error with chacl

chacl -d user:john:rw- /tmp/tcl8.4.16-src.tar
chacl: invalid ACL: user name not terminated with dot in ACL entry: "user:john:rw-"

regards
himacs

Re: removing setacl

Mel Burslan — Fri, 24 Jul 2009 12:30:18 GMT

I think I said, check the man page for syntax. chacl parameters are not the same as that of setacl. Try this:

chacl -d 'john.rw-' /tmp/tcl8.4.16-src.tar

Re: removing setacl

Roopesh Francis_1 — Fri, 24 Jul 2009 12:30:37 GMT

this is the ouptput from my server
s1:rsh:/home/user1>touch test
s1:rsh:/home/user1>setacl -m u:user1:rwx test
s1:rsh:/home/user1>getacl test
# file: test
# owner: root
# group: root
user::rw-
user:user1:rwx
group::r--
class:rwx
other:---
s1:rsh:/home/user1>setacl -m u:user1:rw test
s1:rsh:/home/user1>getacl test
# file: test
# owner: root
# group: root
user::rw-
user:user1:rw-
group::r--
class:rw-
other:---
s1:rsh:/home/user1>

Re: removing setacl

himacs — Fri, 24 Jul 2009 12:42:52 GMT

HI frans,

Thanx for the reply..

now i want to remove acl permissions.When i checked man pages i have found -d option.
CAn anybody tell correct format..

with chacl also not happening..

quick response highly appreciated

regards
himacs

Re: removing setacl

Mel Burslan — Fri, 24 Jul 2009 12:45:07 GMT

what error message did you get when you ran:

chacl -d 'john.rw-' /tmp/tcl8.4.16-src.tar

command ? Could you please post ?

Re: removing setacl

himacs — Fri, 24 Jul 2009 12:48:58 GMT

Hi Mel,

Plz find the error..

#chacl -d 'john.rw-' tcl8.4.16-src.tar
chacl: invalid ACL: invalid group name in ACL entry: "john.rw-"

regards
himacs

Re: removing setacl

Mel Burslan — Fri, 24 Jul 2009 12:54:06 GMT

I thought the group was optional but obviously not. Then run this:

chacl -d 'john.*rw-' tcl8.4.16-src.tar

if this does not work, please post the error message again. Dealing with ACLs is no fun

Re: removing setacl

Mel Burslan — Fri, 24 Jul 2009 12:58:06 GMT

chacl is more trouble than I'd like to deal with on a Friday.

you can yank all rights of the user john, using this command

setacl -d user:john

HTH

Re: removing setacl

himacs — Fri, 24 Jul 2009 12:58:56 GMT

Hi Mel,

again same error..

chacl: invalid ACL: invalid group name in ACL entry: "john.*rw-"

himacs

Re: removing setacl

himacs — Fri, 24 Jul 2009 13:05:13 GMT

Thanx Mel,

its solved..
setacl -d user:john

thanx to everyone who actively participated in this session.

regards
himacs

Re: removing setacl

Roopesh Francis_1 — Fri, 24 Jul 2009 13:05:57 GMT

can you please post output of setacl -m command

Re: removing setacl

himacs — Fri, 24 Jul 2009 13:08:22 GMT

hi Frans,

As i posted above ,issue solved with
setacl option.

regards
himacs

Re: removing setacl

Steven Schweda — Fri, 24 Jul 2009 13:10:16 GMT

> for removing acl
> setacl -d u:john:rwx filename.

> check the setacl man pages for details
> http://docs.hp.com/en/B3921-90010/setacl.1.html

You mean where it says this?:

[...]
For the -d option, acl_entries are one or
more comma separated ACL entries without
permissions, [...]

Note: "without permissions". I know nothing,
but ":rwx" looks to me like permissions.

Re: removing setacl

himacs — Fri, 24 Jul 2009 16:07:49 GMT

useful thread