Re: Solaris 9 - ACL, complete removal

From: Peter C. Tribble (ptribble_at_hgmp.mrc.ac.uk)
Date: 03/10/04


Date: Wed, 10 Mar 2004 15:52:00 +0000 (UTC)

In article <SWE3c.7793$zu.7221@newsfe1-win>,
        "Gareth Crispin" <gareth.crispin@ntlworld.com> writes:
> Group,
>
> I'm currently studying for the CX-310-014 exam, with touches upon the topic
> of Access Control Lists.
>
> I can effectively set, view and modify ACL's (getfacl setacl), but once I'm
> finished I can't remove them completely, so that standard Unix file
> permissions take precedence again. How do I do this?

Use setfacl to replace the entire ACL with one that only contains the
regular permission bits. For example:

/bin/getfacl $file | /bin/egrep '^(user::|group::|mask:|other:)' | /bin/setfacl -f - $file

(although that might leave if with an ACL if the mask was nonstandard).

-- 
-Peter Tribble
MRC Rosalind Franklin Centre for Genomics Research
http://www.rfcgr.mrc.ac.uk/~ptribble/


Relevant Pages

  • Re: security group to install software
    ... You can modify the ACL for the ... registry the same way. ... "Brendon Rogers" skrev i meddelandet ...
    (microsoft.public.windows.server.active_directory)
  • Re: USB Portable Drive - NTFS
    ... XP Pro provides direct access ... Mode to be able to modify ACL. ... I have a Freecom Toughdrive 160Gb which I want to use as "travel disk". ...
    (microsoft.public.windowsxp.general)
  • Service Identify and DCOM ACLs
    ... necessary to modify is ACL (launch / configuration/ access) to enable ... Is it necessary to modify the servers DCOM ACL to include ...
    (microsoft.public.windowsxp.security_admin)
  • DirectorySecurity canonical form error
    ... I am trying to modify the ACL on some files and directories using the ... Framework 2.0 security classes and am getting this error: ...
    (microsoft.public.dotnet.framework.clr)
  • Re: GPO Policy
    ... There is no such how ever you can modify the ACL for the Desktop of a ... redirected shared desktop, but by my advice that is not a good option. ...
    (microsoft.public.windows.group_policy)