diff options
author | jedgar <jedgar@FreeBSD.org> | 2001-04-05 01:48:07 +0000 |
---|---|---|
committer | jedgar <jedgar@FreeBSD.org> | 2001-04-05 01:48:07 +0000 |
commit | fa88e7e9b21ea8d131a8ba163f8f7a88d2cea818 (patch) | |
tree | e8003c10d13d5dd832dbd1099ebbdceff16c8c48 /lib/libc/posix1e/acl.3 | |
parent | c2d1320be60f2120c1d9b4c944e731b93982d1cb (diff) | |
download | FreeBSD-src-fa88e7e9b21ea8d131a8ba163f8f7a88d2cea818.zip FreeBSD-src-fa88e7e9b21ea8d131a8ba163f8f7a88d2cea818.tar.gz |
- Add descriptions and cross-references for the ACL editing library
functions.
- Place the acl_dup() description in alphabetical order.
- Move the POSIX.1e descriptions under the ENVIRONMENT section to the
STANDARDS section.
Reviewed by: rwatson
Obtained from: TrustedBSD Project
Diffstat (limited to 'lib/libc/posix1e/acl.3')
-rw-r--r-- | lib/libc/posix1e/acl.3 | 122 |
1 files changed, 107 insertions, 15 deletions
diff --git a/lib/libc/posix1e/acl.3 b/lib/libc/posix1e/acl.3 index a581479..e81f2ba 100644 --- a/lib/libc/posix1e/acl.3 +++ b/lib/libc/posix1e/acl.3 @@ -57,6 +57,37 @@ all of these support routines are implemented in .Pp Available functions, sorted by behavior, include: .Pp +.Fn acl_add_perm +.Pp +This function is described in +.Xr acl_add_perm 3 , +and may be used to add permissions to a permission set. +.Pp +.Fn acl_calc_mask +.Pp +This function is described in +.Xr acl_calc_mask 3 , +and may be used to calculate and set the permissions associated with +the ACL_MASK entry. +.Pp +.Fn acl_clear_perms +.Pp +This function is described in +.Xr acl_clear_perms 3 , +and may be used to clear all permissions from a permission set. +.Pp +.Fn acl_copy_entry +.Pp +This function is described in +.Xr acl_copy_entry 3 , +and may be used to copy the contents of an ACL entry. +.Pp +.Fn acl_create_entry +.Pp +This function is described in +.Xr acl_create_entry 3 , +and may be used to create an empty entry in an ACL. +.Pp .Fn acl_delete_def_file , .Fn acl_delete_file_np , .Fn acl_delete_fd_np @@ -65,6 +96,24 @@ These functions are described in .Xr acl_delete 3 , and may be used to delete ACLs from file system objects. .Pp +.Fn acl_delete_entry +.Pp +This function is described in +.Xr acl_delete_entry 3 , +and may be used to delete an entry from an ACL. +.Pp +.Fn acl_delete_perm +.Pp +This function is described in +.Xr acl_delete_perm 3 , +and may be used to delete permissions from a permset. +.Pp +.Fn acl_dup +.Pp +This function is described in +.Xr acl_dup 3 , +and may be used to duplicate an ACL structure. +.Pp .Fn acl_free .Pp This function is described in @@ -86,17 +135,29 @@ These functions are described in .Xr acl_get 3 , and may be used to retrieve ACLs from file system objects. .Pp -.Fn acl_init +.Fn acl_get_permset .Pp This function is described in -.Xr acl_init 3 , -and may be used to allocate a fresh (empty) ACL structure. +.Xr acl_get_permset 3 , +and may be used to retrieve a permset from an ACL entry. .Pp -.Fn acl_dup +.Fn acl_get_qualifier .Pp This function is described in -.Xr acl_dup 3 , -and may be used to duplicate an ACL structure. +.Xr acl_get_qualifier 3 , +and may be used to retrieve the qualifier from an ACL entry. +.Pp +.Fn acl_get_tag_type +.Pp +This function is described in +.Xr acl_get_tag_type 3 , +and may be used to retrieve the tag type from an ACL entry. +.Pp +.Fn acl_init +.Pp +This function is described in +.Xr acl_init 3 , +and may be used to allocate a fresh (empty) ACL structure. .Pp .Fn acl_set_file , .Fn acl_set_fd , @@ -106,6 +167,24 @@ These functions are described in .Xr acl_set 3 , and may be used to assign an ACL to a file system object. .Pp +.Fn acl_set_permset +.Pp +This function is described in +.Xr acl_set_permset 3 , +and may be used to set the permissions of an ACL entry from a permset. +.Pp +.Fn acl_set_qualifier +.Pp +This function is described in +.Xr acl_set_qualifier 3 , +and may be used to set the qualifier of an ACL. +.Pp +.Fn acl_set_tag_type +.Pp +This function is described in +.Xr acl_set_tag_type 3 , +and may be used to set the tag type of an ACL. +.Pp .Fn acl_to_text .Pp This function is described in @@ -132,26 +211,39 @@ library. .Fx Ns 's support for POSIX.1e interfaces and features is still under development at this time. -.Sh ENVIRONMENT -POSIX.1e assigns security labels to all objects, extending the security -functionality described in POSIX.1. -These additional labels provide fine-grained discretionary access control, -fine-grained capabilities, and labels necessary for mandatory access -control. -POSIX.2c describes a set of userland utilities for manipulating these -labels. -.\" .Sh FILES .Sh SEE ALSO +.Xr acl_add_perm 3 , +.Xr acl_calc_mask 3 , +.Xr acl_clear_perms 3 , +.Xr acl_copy_entry 3 , +.Xr acl_create_entry 3 , +.Xr acl_delete_entry 3 , +.Xr acl_delete_perm 3 , .Xr acl_dup 3 , .Xr acl_free 3 , .Xr acl_from_text 3 , .Xr acl_get 3 , +.Xr acl_get_permset 3 , +.Xr acl_get_qualifier 3 , +.Xr acl_get_tag_type 3 , +.Xr acl_init 3 , .Xr acl_set 3 , +.Xr acl_set_permset 3 , +.Xr acl_set_qualifier 3 , +.Xr acl_set_tag_type 3 , .Xr acl_to_text 3 , .Xr acl_valid 3 , .Xr acl 9 , .Xr posix1e 3 .Sh STANDARDS +POSIX.1e assigns security labels to all objects, extending the security +functionality described in POSIX.1. +These additional labels provide fine-grained discretionary access control, +fine-grained capabilities, and labels necessary for mandatory access +control. +POSIX.2c describes a set of userland utilities for manipulating these +labels. +.Pp POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion of the draft continues on the cross-platform POSIX.1e implementation mailing list. |