summaryrefslogtreecommitdiffstats
path: root/lib/libc/posix1e/acl.3
diff options
context:
space:
mode:
authorrwatson <rwatson@FreeBSD.org>2001-03-26 19:55:35 +0000
committerrwatson <rwatson@FreeBSD.org>2001-03-26 19:55:35 +0000
commit00f5ebabeed91ca5ec19013dcbdce01d8b362144 (patch)
tree2b31a495daa1d04f08fbfd23c396df792dff1e03 /lib/libc/posix1e/acl.3
parent47e63f32ef5135a8af3e71f9de321b05a17a0f11 (diff)
downloadFreeBSD-src-00f5ebabeed91ca5ec19013dcbdce01d8b362144.zip
FreeBSD-src-00f5ebabeed91ca5ec19013dcbdce01d8b362144.tar.gz
o Update copyright date
o Revise description in light of commits over last month including: - ACL editing library is now implemented - ACLs are now implemented Obtained from: TrustedBSD Project
Diffstat (limited to 'lib/libc/posix1e/acl.3')
-rw-r--r--lib/libc/posix1e/acl.377
1 files changed, 31 insertions, 46 deletions
diff --git a/lib/libc/posix1e/acl.3 b/lib/libc/posix1e/acl.3
index 74690fb..a581479 100644
--- a/lib/libc/posix1e/acl.3
+++ b/lib/libc/posix1e/acl.3
@@ -1,5 +1,5 @@
.\"-
-.\" Copyright (c) 2000 Robert N. M. Watson
+.\" Copyright (c) 2000, 2001 Robert N. M. Watson
.\" All rights reserved.
.\"
.\" Redistribution and use in source and binary forms, with or without
@@ -37,37 +37,23 @@
.Fd #include <sys/types.h>
.Fd #include <sys/acl.h>
.Sh DESCRIPTION
-As shipped,
-.Fx 4.0
-permits file systems to export
-Access Control Lists via the VFS, and provides a library for userland
-access to and manipulation of these ACLs, but support for ACLs is not
-provided by any file systems shipped in the base operating system.
-The library calls shipped with 4.0 include routines to allocate,
-duplicate, retrieve, set, and validate ACLs associated with file objects.
+.Fx
+permits file systems to export Access Control Lists via the VFS, and
+provides a library for userland access to and manipulation of these ACLs.
+Not all file systems provide support for ACLs, and some may require that
+ACL support be explicitely enabled by the administrator.
+The library calls include routines to allocate, duplicate, retrieve, set,
+and validate ACLs associated with file objects.
As well as the POSIX.1e routines, there are a number of non-portable
extensions defined that allow for alternative ACL semantics than the
-POSIX.1e semantics, such as AFS, NTFS, Coda, and NWFS semantics. Where
-routines are non-standard, they are suffixed with _np to indicate that
+POSIX.1e semantics, such as AFS, NTFS, Coda, and NWFS semantics.
+Where routines are non-standard, they are suffixed with _np to indicate that
they are not portable.
.Pp
POSIX.1e describes a set of ACL manipulation routines to manage the
-contents of ACLs, as well as their relationships with files. This
-manipulation library is not currently implemented in
-.Fx ,
-although
-a third party library was under development at the time this document
-was written. There is a general consensus that the POSIX.1e manipulation
-routines are ambiguously defined in the specification, and don't meet the
-needs of most applications. For the time being, applications may
-directly manipulate the ACL structures, defined in acl.h, although the
-recommended usage is to only ever handle text-form ACLs in applications,
-generated and maintained using
-.Fn acl_from_text
-and
-.Fn acl_to_text ,
-passed directly to and from the management routines. In this manner,
-an application can remain safely unaware of the contents of ACLs.
+contents of ACLs, as well as their relationships with files; almost
+all of these support routines are implemented in
+.Fx .
.Pp
Available functions, sorted by behavior, include:
.Pp
@@ -139,22 +125,21 @@ Documentation of the internal kernel interfaces backing these calls may
be found in
.Xr acl 9 .
The syscalls between the internal interfaces and the public library
-routines may change over time, and as such are not documented. They are
-not intended to be called directly without going through the library.
+routines may change over time, and as such are not documented.
+They are not intended to be called directly without going through the
+library.
.Sh IMPLEMENTATION NOTES
.Fx Ns 's
support for POSIX.1e interfaces and features is still under
development at this time.
.Sh ENVIRONMENT
POSIX.1e assigns security labels to all objects, extending the security
-functionality described in POSIX.1. These additional labels provide
-fine-grained discretionary access control, fine-grained capabilities,
-and labels necessary for mandatory access control. POSIX.2c describes
-a set of userland utilities for manipulating these labels. These userland
-utilities are not bundled with
-.Fx 4.0
-so as to discourage their
-use in the short term.
+functionality described in POSIX.1.
+These additional labels provide fine-grained discretionary access control,
+fine-grained capabilities, and labels necessary for mandatory access
+control.
+POSIX.2c describes a set of userland utilities for manipulating these
+labels.
.\" .Sh FILES
.Sh SEE ALSO
.Xr acl_dup 3 ,
@@ -167,17 +152,17 @@ use in the short term.
.Xr acl 9 ,
.Xr posix1e 3
.Sh STANDARDS
-POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion
-of the draft continues on the cross-platform POSIX.1e implementation
-mailing list. To join this list, see the
+POSIX.1e is described in IEEE POSIX.1e draft 17.
+Discussion of the draft continues on the cross-platform POSIX.1e
+implementation mailing list.
+To join this list, see the
.Fx
-POSIX.1e implementation
-page for more information.
+POSIX.1e implementation page for more information.
.Sh HISTORY
POSIX.1e support was introduced in
-.Fx 4.0 ,
-and development continues.
+.Fx 4.0 ;
+.Fx 5.0
+was the first version to include a complete ACL implementation based
+on extended attributes.
.Sh AUTHORS
.An Robert N M Watson
-.Sh BUGS
-These features are not yet fully implemented.
OpenPOWER on IntegriCloud