Novell LINUX ENTERPRISE SERVER 10 SP2 - INSTALLATION AND ADMINISTRATION Installation Manual page 326

ACL entry owner. Other class permissions are mapped to the respective ACL entry.
However, the mapping of the group class permissions is different in the two cases.
Figure 15.1 Minimum ACL: ACL Entries Compared to Permission Bits
In the case of a minimum ACL—without mask—the group class permissions are mapped
to the ACL entry owning group. This is shown in Figure 15.1, "Minimum ACL: ACL
Entries Compared to Permission Bits" (page 308). In the case of an extended ACL—with
mask—the group class permissions are mapped to the mask entry. This is shown in
Figure 15.2, "Extended ACL: ACL Entries Compared to Permission Bits" (page 308).
Figure 15.2 Extended ACL: ACL Entries Compared to Permission Bits
This mapping approach ensures the smooth interaction of applications, regardless of
whether they have ACL support. The access permissions that were assigned by means
of the permission bits represent the upper limit for all other "fine adjustments" made
with an ACL. Changes made to the permission bits are reflected by the ACL and vice
versa.
15.4.2 A Directory with an Access ACL
With getfacl and setfacl on the command line, you can access ACLs. The usage
of these commands is demonstrated in the following example.
308 Installation and Administration