Implementing Unix ACL Control. (File Access Control Lists)

Products

• Top Secret

Issue/Introduction

Can you implement Unix ACL on a directory-by-directory basis?      
ESM is Top Secret.           

Resolution

Yes, you can implement Unix ACL on a directory-by-directory basis.

The setfacl Unix command only affects the directory/file in the current directory.

If HFSACL is turned on, this will only affect the directory/file that the setfacl command is issued.                                                                  

for example:                                                             

1. at ready omvs                                                         

2. setfacl -m "u:acladm:r--" test1                                       

3. setfacl -D e