topic Saving Defined ACL's in Operating System - HP-UX

Saving Defined ACL's

Richard Ross — Wed, 08 Mar 2006 07:57:31 GMT

Is there a way to collect all the ACL's that are defined to the system (via getacl) so we could have the ability to restore (via a setacl). Want to play it safe for Disaster Recovery. This is for HP/UX 11.0 (JFS 3.3), 11.11 and 11.23

Thanks

Re: Saving Defined ACL's

Peter Godron — Wed, 08 Mar 2006 08:06:25 GMT

Richard,
man fbackup
gives you:
"
-A Do not back up optional entries of access control lists
(ACLs) for files. Normally, all mode information is
backed up including the optional ACL entries. With the
-A option, the summary mode information (as returned by
stat()) is backed up. Use this option when backing up
files from a system that contains ACLs to be recovered
on a system that does not understand ACLs (see acl(5)).
"
So fbackup would have a copy of your ACL.

Re: Saving Defined ACL's

Richard Ross — Wed, 08 Mar 2006 08:15:35 GMT

Peter .. Thanks, but I was thinking more standalone .. we do not use fbackup.

Re: Saving Defined ACL's

Peter Godron — Wed, 08 Mar 2006 08:24:13 GMT

Richard,
as a last resort:
cd /
find / -exec getacl {} \; > /tmp/acls.lis

This will search all files on the machine and execute a getacl, dumping the output into a file.
You could then use that file to extract the information required for setacl.

Rather messy and I am sure somebody else will have a better idea.

Re: Saving Defined ACL's

Richard Ross — Wed, 08 Mar 2006 09:08:07 GMT

Well .. After looking into more detail .. looks like the following will work:

find / -aclv opt | xargs getacl

My problem is I need to perform this on Linux and AIX and those platforms don't support the -aclv param on find. But one down and 2 to go

Thanks

Re: Saving Defined ACL's

Peter Godron — Wed, 08 Mar 2006 09:57:24 GMT

Richard,
happy the find command set you on the way.

Probably best to close this thread and raise new ones in the relevant fora.

Re: Saving Defined ACL's

Richard Ross — Wed, 08 Mar 2006 10:30:00 GMT

find / -aclv opt | xargs getacl

Will do the job .. Thanks for the help