removing setacl

[himacs]

Hi gurus,

I have set setacl to a user with rwx.Now i want to modify the same with rw-. HOw it can be done.

and how to remove the set permission..

The command i used is
setacl -m user:john:rwx /test

regards
himacs

[Roopesh Francis_1]

you can try below command for modifying acl
setacl -m u:john:rw /test

for removing acl
setacl -d u:john:rwx filename.

Thanks

[Roopesh Francis_1]

check the setacl man pages for details
http://docs.hp.com/en/B3921-90010/setacl.1.html

[Mel Burslan]

Why don't you just overwrite the ACL with the new permissions:

setacl -m user:john:rw- /test

to delete an ACL, use

chacl -d

command. for the exact syntax and capabilities of chacl command, use man pages for the command.

This information is from a very old time, so I can not guarantee its accuracy. Please read the man pages. And try to stay away from ACLs even how tempting they look. In the long run, you are getting yourself into a big mess, that nobody but you can deal with.

[himacs]

HI

thanx for the responses..

setacl -d not happening.it gives error as unknown user.

plz provide the chacl -d format

m getting below error with chacl


chacl -d user:john:rw- /tmp/tcl8.4.16-src.tar
chacl: invalid ACL: user name not terminated with dot in ACL entry: "user:john:rw-"


regards
himacs

[Mel Burslan]

I think I said, check the man page for syntax. chacl parameters are not the same as that of setacl. Try this:

chacl -d 'john.rw-' /tmp/tcl8.4.16-src.tar

[Roopesh Francis_1]

this is the ouptput from my server
s1:rsh:/home/user1>touch test
s1:rsh:/home/user1>setacl -m u:user1:rwx test
s1:rsh:/home/user1>getacl test
# file: test
# owner: root
# group: root
user::rw-
user:user1:rwx
group::r--
class:rwx
other:---
s1:rsh:/home/user1>setacl -m u:user1:rw test
s1:rsh:/home/user1>getacl test
# file: test
# owner: root
# group: root
user::rw-
user:user1:rw-
group::r--
class:rw-
other:---
s1:rsh:/home/user1>

[himacs]

HI frans,

Thanx for the reply..

now i want to remove acl permissions.When i checked man pages i have found -d option.
CAn anybody tell correct format..

with chacl also not happening..

quick response highly appreciated



regards
himacs

[Mel Burslan]

what error message did you get when you ran:

chacl -d 'john.rw-' /tmp/tcl8.4.16-src.tar

command ? Could you please post ?

[himacs]

Hi Mel,

Plz find the error..

#chacl -d 'john.rw-' tcl8.4.16-src.tar
chacl: invalid ACL: invalid group name in ACL entry: "john.rw-"


regards
himacs

[Mel Burslan]

I thought the group was optional but obviously not. Then run this:

chacl -d 'john.*rw-' tcl8.4.16-src.tar

if this does not work, please post the error message again. Dealing with ACLs is no fun

[Mel Burslan · Accepted solution]

chacl is more trouble than I'd like to deal with on a Friday.

you can yank all rights of the user john, using this command

setacl -d user:john

HTH

[himacs]

Hi Mel,

again same error..

chacl: invalid ACL: invalid group name in ACL entry: "john.*rw-"


himacs

[himacs]

Thanx Mel,

its solved..
setacl -d user:john


thanx to everyone who actively participated in this session.


regards
himacs

[Roopesh Francis_1]

can you please post output of setacl -m command

[himacs]

hi Frans,

As i posted above ,issue solved with
setacl option.

regards
himacs

[Steven Schweda]

> for removing acl
> setacl -d u:john:rwx filename.

> check the setacl man pages for details
> http://docs.hp.com/en/B3921-90010/setacl.1.html

You mean where it says this?:

[...]
For the -d option, acl_entries are one or
more comma separated ACL entries without
permissions, [...]

Note: "without permissions". I know nothing,
but ":rwx" looks to me like permissions.

[himacs]

useful thread