ACL(3) BSD Library Functions Manual ACL(3)
NAME
acl -- introduction to the POSIX.1e ACL security API
LIBRARY
Standard C Library (libc, -lc)
SYNOPSIS
#include <sys/types.h>
#include <sys/acl.h>
DESCRIPTION
The system permits file systems to export Access Control Lists via the
VFS, and provides a library for userland access to and manipulation of
these ACLs. Not all file systems provide support for ACLs, and some may
require that ACL support be explicitly enabled by the administrator. The
library calls include routines to allocate, duplicate, retrieve, set, and
validate ACLs associated with file objects.
This implementation of the POSIX.1e library differs from the standard in
a number of non-portable ways in order to support the MacOS/Darwin ACL
semantic. Where possible, these differences are implemented using the
mechanisms provided in the standard for such extensions. Where routines
are non-standard, they are suffixed with _np to indicate that they are
not portable.
POSIX.1e describes a set of ACL manipulation routines to manage the con-
tents of ACLs, as well as their relationships with files; almost all of
these support routines are implemented.
Available functions, sorted by behavior, include:
acl_add_perm()
This function is described in acl_add_perm(3), and may be used to
add permissions to a permission set.
acl_clear_perms()
This function is described in acl_clear_perms(3), and may be used
to clear all permissions from a permission set.
