diff options
author | rwatson <rwatson@FreeBSD.org> | 2001-03-26 19:55:35 +0000 |
---|---|---|
committer | rwatson <rwatson@FreeBSD.org> | 2001-03-26 19:55:35 +0000 |
commit | 00f5ebabeed91ca5ec19013dcbdce01d8b362144 (patch) | |
tree | 2b31a495daa1d04f08fbfd23c396df792dff1e03 /lib/libc/posix1e/acl.3 | |
parent | 47e63f32ef5135a8af3e71f9de321b05a17a0f11 (diff) | |
download | FreeBSD-src-00f5ebabeed91ca5ec19013dcbdce01d8b362144.zip FreeBSD-src-00f5ebabeed91ca5ec19013dcbdce01d8b362144.tar.gz |
o Update copyright date
o Revise description in light of commits over last month including:
- ACL editing library is now implemented
- ACLs are now implemented
Obtained from: TrustedBSD Project
Diffstat (limited to 'lib/libc/posix1e/acl.3')
-rw-r--r-- | lib/libc/posix1e/acl.3 | 77 |
1 files changed, 31 insertions, 46 deletions
diff --git a/lib/libc/posix1e/acl.3 b/lib/libc/posix1e/acl.3 index 74690fb..a581479 100644 --- a/lib/libc/posix1e/acl.3 +++ b/lib/libc/posix1e/acl.3 @@ -1,5 +1,5 @@ .\"- -.\" Copyright (c) 2000 Robert N. M. Watson +.\" Copyright (c) 2000, 2001 Robert N. M. Watson .\" All rights reserved. .\" .\" Redistribution and use in source and binary forms, with or without @@ -37,37 +37,23 @@ .Fd #include <sys/types.h> .Fd #include <sys/acl.h> .Sh DESCRIPTION -As shipped, -.Fx 4.0 -permits file systems to export -Access Control Lists via the VFS, and provides a library for userland -access to and manipulation of these ACLs, but support for ACLs is not -provided by any file systems shipped in the base operating system. -The library calls shipped with 4.0 include routines to allocate, -duplicate, retrieve, set, and validate ACLs associated with file objects. +.Fx +permits file systems to export Access Control Lists via the VFS, and +provides a library for userland access to and manipulation of these ACLs. +Not all file systems provide support for ACLs, and some may require that +ACL support be explicitely enabled by the administrator. +The library calls include routines to allocate, duplicate, retrieve, set, +and validate ACLs associated with file objects. As well as the POSIX.1e routines, there are a number of non-portable extensions defined that allow for alternative ACL semantics than the -POSIX.1e semantics, such as AFS, NTFS, Coda, and NWFS semantics. Where -routines are non-standard, they are suffixed with _np to indicate that +POSIX.1e semantics, such as AFS, NTFS, Coda, and NWFS semantics. +Where routines are non-standard, they are suffixed with _np to indicate that they are not portable. .Pp POSIX.1e describes a set of ACL manipulation routines to manage the -contents of ACLs, as well as their relationships with files. This -manipulation library is not currently implemented in -.Fx , -although -a third party library was under development at the time this document -was written. There is a general consensus that the POSIX.1e manipulation -routines are ambiguously defined in the specification, and don't meet the -needs of most applications. For the time being, applications may -directly manipulate the ACL structures, defined in acl.h, although the -recommended usage is to only ever handle text-form ACLs in applications, -generated and maintained using -.Fn acl_from_text -and -.Fn acl_to_text , -passed directly to and from the management routines. In this manner, -an application can remain safely unaware of the contents of ACLs. +contents of ACLs, as well as their relationships with files; almost +all of these support routines are implemented in +.Fx . .Pp Available functions, sorted by behavior, include: .Pp @@ -139,22 +125,21 @@ Documentation of the internal kernel interfaces backing these calls may be found in .Xr acl 9 . The syscalls between the internal interfaces and the public library -routines may change over time, and as such are not documented. They are -not intended to be called directly without going through the library. +routines may change over time, and as such are not documented. +They are not intended to be called directly without going through the +library. .Sh IMPLEMENTATION NOTES .Fx Ns 's support for POSIX.1e interfaces and features is still under development at this time. .Sh ENVIRONMENT POSIX.1e assigns security labels to all objects, extending the security -functionality described in POSIX.1. These additional labels provide -fine-grained discretionary access control, fine-grained capabilities, -and labels necessary for mandatory access control. POSIX.2c describes -a set of userland utilities for manipulating these labels. These userland -utilities are not bundled with -.Fx 4.0 -so as to discourage their -use in the short term. +functionality described in POSIX.1. +These additional labels provide fine-grained discretionary access control, +fine-grained capabilities, and labels necessary for mandatory access +control. +POSIX.2c describes a set of userland utilities for manipulating these +labels. .\" .Sh FILES .Sh SEE ALSO .Xr acl_dup 3 , @@ -167,17 +152,17 @@ use in the short term. .Xr acl 9 , .Xr posix1e 3 .Sh STANDARDS -POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion -of the draft continues on the cross-platform POSIX.1e implementation -mailing list. To join this list, see the +POSIX.1e is described in IEEE POSIX.1e draft 17. +Discussion of the draft continues on the cross-platform POSIX.1e +implementation mailing list. +To join this list, see the .Fx -POSIX.1e implementation -page for more information. +POSIX.1e implementation page for more information. .Sh HISTORY POSIX.1e support was introduced in -.Fx 4.0 , -and development continues. +.Fx 4.0 ; +.Fx 5.0 +was the first version to include a complete ACL implementation based +on extended attributes. .Sh AUTHORS .An Robert N M Watson -.Sh BUGS -These features are not yet fully implemented. |