topic Re: ACL in Operating System - HP-UX

ACL

John McDen — Mon, 10 Jun 2002 15:55:01 GMT

I am not sure how to use acl's

Need to give a user xyz access to the following dir.

drwxr-xr-x appl dba reports

how should I go about using acl's ??

Re: ACL

Helen French — Mon, 10 Jun 2002 16:00:50 GMT

Try this:

# cd dir_name
# chacl 'xyz.%=rwx' reports
# lsacl reports (for checking)

xyz.% - the first part in the user name. 'rwx' is the permission.

If you want to give group permission, for group 'abc', then:

# chacl '%.abc=rwx' reports
# man acl (for details)

Re: ACL

PIYUSH D. PATEL — Mon, 10 Jun 2002 16:02:54 GMT

Hi,

try these:
man acl
man chacl
man setacl
man getacl
man lsacl

Piyush

Re: ACL

S.K. Chan — Mon, 10 Jun 2002 16:20:45 GMT

For JFS filesystem you would use .. "setacl" and "getacl" for example .. (directory "test" in /opt)

# cd /opt
# getacl test
=file: test
=owner: root
=group: sys
user::rwx
group::r-x
class:rwx
other:r-x
# setacl -m user:skchan:rwx test
# getacl test
=file: test
=owner: root
=group: sys
user::rwx
user:skchan:rwx
group::r-x
class:rwx
other:r-x

Man "setacl" for more details ..

Re: ACL

MANOJ SRIVASTAVA — Mon, 10 Jun 2002 16:21:44 GMT

Hi John

May be you can refer to this too :

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90684/B2355-90684_top.html&con=/hpux/onlinedocs/B2355-90684/00/00/6-con.html&toc=/hpux/onlinedocs/B2355-90684/00/00/6-toc.html&searchterms=command%7csyntax%7cacl&queryid=20020610-102959

Manoj Srivastava

Re: ACL

John McDen — Mon, 10 Jun 2002 16:23:04 GMT

hello shiju

When I tried chacl it gave me an error
(chacl 'xyz.%=rwx' report)

Function is not available (errno = 251)

Re: ACL

S.K. Chan — Mon, 10 Jun 2002 16:29:04 GMT

The chacl command does not work on vxfs. Use "setacl" instead.

Re: ACL

Helen French — Mon, 10 Jun 2002 16:37:49 GMT

John,

As S.K said, the 'chacl' command will be replaced with 'setacl' command on vxfs file systems. You can use 'getacl' instead of 'lsacl'

Re: ACL

John McDen — Mon, 10 Jun 2002 16:40:17 GMT

when I try setacl it gives

sh: setacl: not found.

Do I need to install something to get this working..???

Re: ACL

John McDen — Mon, 10 Jun 2002 16:42:54 GMT

I have B3929BA HP OnLineJFS (Advanced VxFS)

Re: ACL

Helen French — Mon, 10 Jun 2002 16:46:01 GMT

What is the file system version ? JFS 3.3 ? Check it with:

# fstyp -v /dev/vg??/lvol?

Re: ACL

John McDen — Mon, 10 Jun 2002 16:52:45 GMT

Output of fstyp

vxfs
version: 3
f_bsize: 8192
f_frsize: 1024
f_blocks: 7692288
f_bfree: 1649036
f_bavail: 1545972
f_files: 493152
f_ffree: 412256
f_favail: 412256
f_fsid: 1073807373
f_basetype: vxfs
f_namemax: 254
f_magic: a501fcf5
f_featurebits: 0
f_flag: 16
f_fsindex: 6
f_size: 7692288

Re: ACL

Helen French — Mon, 10 Jun 2002 17:01:25 GMT

You may need to upgrade the file system layout to 4 in order to use ACLs:

# vxupgrade -n 4 -r /dev/vg00/rlvol4 /tmp ( for /tmp file system)

Check this document too (TKB #2200131019):

http://support2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000056413901

Re: ACL

S.K. Chan — Mon, 10 Jun 2002 18:53:52 GMT

To determine if you have at least JFS 3.3,
# swlist -l fileset JFS
After installing 3.3 the FS layout has to be upgraded to version 4. You do want to check out the online doc on JFS's ACL also..
http://www.docs.hp.com/hpux/onlinedocs/os/jfs_acl.pdf