cancel
Showing results for 
Search instead for 
Did you mean: 

removing setacl

 
SOLVED
Go to solution
himacs
Super Advisor

removing setacl

Hi gurus,

I have set setacl to a user with rwx.Now i want to modify the same with rw-. HOw it can be done.

and how to remove the set permission..

The command i used is
setacl -m user:john:rwx /test

regards
himacs


17 REPLIES
Roopesh Francis_1
Trusted Contributor

Re: removing setacl

you can try below command for modifying acl
setacl -m u:john:rw /test

for removing acl
setacl -d u:john:rwx filename.

Thanks
Roopesh Francis_1
Trusted Contributor

Re: removing setacl

check the setacl man pages for details
http://docs.hp.com/en/B3921-90010/setacl.1.html
Mel Burslan
Honored Contributor

Re: removing setacl

Why don't you just overwrite the ACL with the new permissions:

setacl -m user:john:rw- /test

to delete an ACL, use

chacl -d

command. for the exact syntax and capabilities of chacl command, use man pages for the command.

This information is from a very old time, so I can not guarantee its accuracy. Please read the man pages. And try to stay away from ACLs even how tempting they look. In the long run, you are getting yourself into a big mess, that nobody but you can deal with.
________________________________
UNIX because I majored in cryptology...
himacs
Super Advisor

Re: removing setacl

HI

thanx for the responses..

setacl -d not happening.it gives error as unknown user.

plz provide the chacl -d format

m getting below error with chacl


chacl -d user:john:rw- /tmp/tcl8.4.16-src.tar
chacl: invalid ACL: user name not terminated with dot in ACL entry: "user:john:rw-"


regards
himacs
Mel Burslan
Honored Contributor

Re: removing setacl

I think I said, check the man page for syntax. chacl parameters are not the same as that of setacl. Try this:

chacl -d 'john.rw-' /tmp/tcl8.4.16-src.tar
________________________________
UNIX because I majored in cryptology...
Roopesh Francis_1
Trusted Contributor

Re: removing setacl

this is the ouptput from my server
s1:rsh:/home/user1>touch test
s1:rsh:/home/user1>setacl -m u:user1:rwx test
s1:rsh:/home/user1>getacl test
# file: test
# owner: root
# group: root
user::rw-
user:user1:rwx
group::r--
class:rwx
other:---
s1:rsh:/home/user1>setacl -m u:user1:rw test
s1:rsh:/home/user1>getacl test
# file: test
# owner: root
# group: root
user::rw-
user:user1:rw-
group::r--
class:rw-
other:---
s1:rsh:/home/user1>
himacs
Super Advisor

Re: removing setacl

HI frans,

Thanx for the reply..

now i want to remove acl permissions.When i checked man pages i have found -d option.
CAn anybody tell correct format..

with chacl also not happening..

quick response highly appreciated



regards
himacs
Mel Burslan
Honored Contributor

Re: removing setacl

what error message did you get when you ran:

chacl -d 'john.rw-' /tmp/tcl8.4.16-src.tar

command ? Could you please post ?
________________________________
UNIX because I majored in cryptology...
himacs
Super Advisor

Re: removing setacl


Hi Mel,

Plz find the error..

#chacl -d 'john.rw-' tcl8.4.16-src.tar
chacl: invalid ACL: invalid group name in ACL entry: "john.rw-"


regards
himacs
Mel Burslan
Honored Contributor

Re: removing setacl

I thought the group was optional but obviously not. Then run this:

chacl -d 'john.*rw-' tcl8.4.16-src.tar

if this does not work, please post the error message again. Dealing with ACLs is no fun
________________________________
UNIX because I majored in cryptology...
Mel Burslan
Honored Contributor
Solution

Re: removing setacl

chacl is more trouble than I'd like to deal with on a Friday.

you can yank all rights of the user john, using this command

setacl -d user:john

HTH
________________________________
UNIX because I majored in cryptology...
himacs
Super Advisor

Re: removing setacl

Hi Mel,

again same error..

chacl: invalid ACL: invalid group name in ACL entry: "john.*rw-"


himacs
himacs
Super Advisor

Re: removing setacl



Thanx Mel,

its solved..
setacl -d user:john


thanx to everyone who actively participated in this session.


regards
himacs
Roopesh Francis_1
Trusted Contributor

Re: removing setacl

can you please post output of setacl -m command
himacs
Super Advisor

Re: removing setacl



hi Frans,

As i posted above ,issue solved with
setacl option.

regards
himacs
Steven Schweda
Honored Contributor

Re: removing setacl

> for removing acl
> setacl -d u:john:rwx filename.

> check the setacl man pages for details
> http://docs.hp.com/en/B3921-90010/setacl.1.html

You mean where it says this?:

[...]
For the -d option, acl_entries are one or
more comma separated ACL entries without
permissions, [...]

Note: "without permissions". I know nothing,
but ":rwx" looks to me like permissions.
himacs
Super Advisor

Re: removing setacl

useful thread