setcifsacl(1) General Commands Manual setcifsacl(1) (NAME) setcifsacl - CIFS (SYNOPSIS) setcifsacl [-v|-U|-a|-A|-D|-M|-S|-o|-g] ""{ ACE SID}"" { } (DESCRIPTION) cifs-utils . setcifsacl CIFS . ACL SID / . () CIFS/SMB . SID . /etc/cifs-utils/idmap-plugin . (OPTIONS) -h . -v . -U ACE ( -a -D -M -S) SACL ( aUdit ACL). -U DACL . -a ACE ACL . ACE ACE ACL . -A ACE ACL ACE. ACE : -D ACE ACL . ACE ACL . -M ACE ACL . SID (type) ACE ACE . -S ACL ACE . ACL ACE . -o SID . -g SID . SID / SID . ACE ""ACL:"" . ACE (Double Quote) . ACE . DACL ACE : o SID - SID. o type - ALLOWED (0x0) DENIED (0x1) OBJECT_ALLOWED (0x5) OBJECT_DENIED (0x6). o flags - OBJECT_INHERIT_FLAG (OI 0x1) CONTAINER_INHERIT_FLAG (CI 0x2) NO_PROPAGATE_INHERIT_FLAG (NI 0x4) INHERIT_ONLY_FLAG (IO 0x8) INHERITED_ACE_FLAG (IA 0x10) OR . o mask - FULL CHANGE READ R W X D P O . SACL ACE : o SID - SID. o type - AUDIT (0x2) AUDIT_OBJECT (0x7) AUDIT_CALLBACK (0xD) AUDIT_CALLBACK_OBJECT (0xF) MANDATORY_LABEL (0x11) RESOURCE_ATTRIBUTE (0x12) SCOPED_POLICY_ID (0x13). o flags - SUCCESSFULL_ACCESS (SA 0x40) FAILED_ACCESS (FA 0x80). o mask - FULL CHANGE READ R W X D P O . (EXAMPLES) ACE setcifsacl -a "ACL:CIFSTESTDOM\user2:DENIED/0x1/D" setcifsacl -a "ACL:CIFSTESTDOM\user1:ALLOWED/OI|CI|NI/D" setcifsacl -U -a "ACL:CIFSTESTDOM\user1:AUDIT/SA/D" ACE ACL setcifsacl -A "ACL:CIFSTESTDOMuser3:ALLOWED/OI/FULL" setcifsacl -A "ACL:CIFSTESTDOMuser2:DENIED/0x1/D" setcifsacl -A "ACL:CIFSTESTDOMuser1:ALLOWED/OI|CI|NI/D" ACE getcifsacl : ACL:CIFSTESTDOMuser2:DENIED/0x1/D ACL:CIFSTESTDOMuser3:ALLOWED/OI/FULL ACL:CIFSTESTDOMuser1:ALLOWED/OI|CI|NI/D ACE setcifsacl -D "ACL:S-1-1-0:0x1/OI/0x1201ff" setcifsacl -U -D "ACL:S-1-1-0:0x2/FA/0xf01ff" ACE setcifsacl -M "ACL:CIFSTESTDOM\user1:ALLOWED/0x1f/CHANGE" setcifsacl -U -M "ACL:CIFSTESTDOM\user1:AUDIT_OBJECT/SA/CHANGE" ACL setcifsacl -S "ACL:CIFSTESTDOM\Administrator:0x0/0x0/FULL,ACL:CIFSTESTDOM\user2:0x0/0x0/FULL" setcifsacl -U -S "ACL:CIFSTESTDOM\Administrator:AUDIT/SA/FULL,ACL:CIFSTESTDOM\user2:0x7/0x80/FULL" SID setcifsacl -o "S-1-5-21-3338130290-3403600371-1423429424-2102" SID setcifsacl -g "" (NOTES) getcifsacl/setcifsacl 2.6.37 . (SEE ALSO) mount.cifs(8), getcifsacl(1) (AUTHOR) setcifsacl Shirish Pargaonkar . Linux CIFS Mailing list . setcifsacl(1)