.. -*- coding: utf-8; -*-

.. include:: HEADER.rst

======

 ACL.

======

.. contents::

   :local:

Managing ACL permissions.

=========================

Set permission::

  $ sudo setfacl -m u:nobody:rwx ~/tmp/dir

  $ sudo setfacl -m g:nogroup:rwx ~/tmp/dir

Review permissions::

  $ sudo getfacl ~/tmp/dir

Remove specific permissions::

  $ sudo setfacl -x u:test ~/tmp/dir

Remove all ACL permissions::

  $ sudo setfacl -b ~/tmp/dir

Remove default ACL::

  $ sudo setfacl -k ~/tmp/dir

Backup and restore ACL::

  $ sudo getfacl ~/tmp/dir >~/tmp/backup.acl

  $ sudo setfacl --restore=~/tmp/backup.acl

Add default ACL to directory to make ACL permission inheritance::

  $ sudo setfacl -m -d u:nobody:rwx /srv/www

  $ sudo setfacl -m u:nobody:rwx /srv/www

.. NOTE:: default ACL is set only on directories and is applied only to

          directory children. So you should explicitly add permission to

          directory itself!