ACL(5) ACL(5) (NAME) acl - (Access Control Lists) (DESCRIPTION) POSIX (ACL) (discretionary access rights) . ACL (ACL TYPES) ACL ACL (access ACL) . ACL ACL ACL (default ACL) . ACL (ACL ENTRIES) ACL ACL . ACL (read) (write) / (search/execute) . ACL (entry tag type) (entry tag qualifier) . <<>> (qualifier) ACL . ACL_USER ACL_GROUP . ACL_USER ACL_GROUP . : ACL_USER_OBJ ACL_USER_OBJ . ACL_USER ACL_USER . ACL_GROUP_OBJ ACL_GROUP_OBJ . ACL_GROUP ACL_GROUP . ACL_MASK ACL_MASK ACL_USER ACL_GROUP_OBJ ACL_GROUP . ACL_OTHER ACL_OTHER ACL . ACL_USER_OBJ ACL_USER (effective user ID) . (effective group ID) (supplementary group IDs) ACL_GROUP_OBJ ACL_GROUP . ACL (VALID ACLs) ACL ACL_USER_OBJ ACL_GROUP_OBJ ACL_OTHER . ACL_USER ACL_GROUP ACL . ACL ACL_USER ACL_GROUP ACL_MASK . ACL ACL_USER ACL_GROUP ACL_MASK . ACL_USER ACL_GROUP . acl_get_file(3) ACL ACL ACL . acl_set_file(3) ACL ACL ACL . acl_delete_def_file(3) . ACL (CORRESPONDENCE BETWEEN ACL ENTRIES AND FILE PERMISSION BITS) ACL . ACL : ACL_USER_OBJ . ACL ACL_MASK ACL_MASK . ACL ACL_MASK ACL_GROUP_OBJ . ACL_OTHER . ACL . ACL ACL . ACL (OBJECT CREATION AND DEFAULT ACLs) creat() mkdir() mknod() mkfifo() open() ACL . ACL mode ACL ACL : 1. ACL ACL . 2. ACL mode . ACL mode ( umask(2)) ACL : 1. ACL ACL_USER_OBJ ACL_GROUP_OBJ ACL_OTHER . . 2. ACL mode . (ACCESS CHECK ALGORITHM) / ACL . : 1. : o ACL_USER_OBJ o . 2. ACL_USER : o ACL_USER ACL_MASK o . 3. ACL_GROUP : o ACL ACL_MASK : o ACL_MASK ACL_GROUP_OBJ ACL_GROUP o . o ( ACL_GROUP ACL_MASK ): o ACL_GROUP_OBJ o . 4. ACL_OTHER . 5. . ACL (ACL TEXT FORMS) ACL . ACL (:) : ACL ACL . : user ACL user ( ACL_USER_OBJ) ( ACL_USER) . group ACL group ( ACL_GROUP_OBJ) ( ACL_GROUP) . mask ACL mask ACL user other ( ACL_MASK). other ACL other user group ACL ( ACL_OTHER). ACL ACL_USER ACL_GROUP . (UID) . (GID) . . / r w x ( ) . ACL (-) . . (whitespace) ACL ( ) . (LONG TEXT FORM) ACL . (#) () . ACL ACL_USER ACL_GROUP_OBJ ACL_GROUP ACL_MASK "effective:" . : user::rw- user:lisa:rw- #effective:r-- group::r-- group:toolies:rw- #effective:r-- mask::r-- other::r-- (SHORT TEXT FORM) ACL . () . . user u group g mask m other o . : r w x. : u::rw-,u:lisa:rw-,g::r--,g:toolies:rw-,m::r--,o::r-- g:toolies:rw,u:lisa:rw,u::wr,g::r,o::r,m::r (RATIONALE) IEEE 1003.1e ACL_MASK . IEEE 1003.1 ("POSIX.1") ACL . B.23 IEEE 1003.1e . (CHANGES TO THE FILE UTILITIES) ACL ls(1) cp(1) mv(1) : o ACL ACL ls(1) ls -l (+) . o -p cp(1) ACL . . o mv(1) ACL . . chmod(1) chmod(2) ACL ACL . (STANDARDS) IEEE 1003.1e ("POSIX.1e") IEEE 1003.1 . 1003.1e POSIX.1e . POSIX.1e . POSIX.1e . ACL (libacl -lacl) . POSIX . . (NOTES) (DENIED PERMISSIONS AND LINUX USER NAMESPACES) ACL . newuidmap(1) setgroups(2) . user_namespaces(7) . (SEE ALSO) chmod(1), creat(2), getfacl(1), ls(1), mkdir(2), mkfifo(2), mknod(2), mount(8), open(2), setfacl(1), stat(2), umask(1) POSIX 1003.1e https://wt.tuxomania.net/publications/posix.1e/download.html POSIX 1003.1e (POSIX 1003.1e FUNCTIONS BY CATEGORY) ACL (ACL storage management) acl_dup(3), acl_free(3), acl_init(3) ACL (ACL entry manipulation) acl_copy_entry(3), acl_create_entry(3), acl_delete_entry(3), acl_get_entry(3), acl_valid(3) acl_add_perm(3), acl_calc_mask(3), acl_clear_perms(3), acl_delete_perm(3), acl_get_permset(3), acl_set_permset(3) acl_get_qualifier(3), acl_get_tag_type(3), acl_set_qualifier(3), acl_set_tag_type(3) ACL (ACL manipulation on an object) acl_delete_def_file(3), acl_get_fd(3), acl_get_file(3), acl_set_fd(3), acl_set_file(3) ACL (ACL format translation) acl_copy_entry(3), acl_copy_ext(3), acl_from_text(3), acl_to_text(3), acl_size(3) POSIX 1003.1e (POSIX 1003.1e FUNCTIONS BY AVAILABILITY) . () . acl_delete_def_file(3), acl_dup(3), acl_free(3), acl_from_text(3), acl_get_fd(3), acl_get_file(3), acl_init(3), acl_set_fd(3), acl_set_file(3), acl_to_text(3), acl_valid(3) acl_add_perm(3), acl_calc_mask(3), acl_clear_perms(3), acl_copy_entry(3), acl_copy_ext(3), acl_copy_int(3), acl_create_entry(3), acl_delete_entry(3), acl_delete_perm(3), acl_get_entry(3), acl_get_permset(3), acl_get_qualifier(3), acl_get_tag_type(3), acl_set_permset(3), acl_set_qualifier(3), acl_set_tag_type(3), acl_size(3) (LINUX EXTENSIONS) (non-portable) : acl_check(3), acl_cmp(3), acl_delete_def_file_at(3), acl_entries(3), acl_equiv_mode(3), acl_error(3), acl_extended_fd(3), acl_extended_file(3), acl_extended_file_at(3), acl_extended_file_nofollow(3), acl_from_mode(3), acl_get_file_at(3), acl_get_perm(3), acl_set_file_at(3), acl_to_any_text(3) (AUTHOR) Andreas Gruenbacher, Linux ACL 2026-06-05 ACL(5)