Acl Support In Applications; For More Information - Novell LINUX ENTERPRISE SERVER 10 SP2 - INSTALLATION AND ADMINISTRATION Installation Manual

following sequence: owner, named user, owning group or named group, and other. The
access is handled in accordance with the entry that best suits the process. Permissions
do not accumulate.
Things are more complicated if a process belongs to more than one group and would
potentially suit several group entries. An entry is randomly selected from the suitable
entries with the required permissions. It is irrelevant which of the entries triggers the
final result "access granted". Likewise, if none of the suitable group entries contains
the required permissions, a randomly selected entry triggers the final result "access
denied".

15.5 ACL Support in Applications

ACLs can be used to implement very complex permission scenarios that meet the re-
quirements of modern applications. The traditional permission concept and ACLs can
be combined in a smart manner. The basic file commands (cp, mv, ls, etc.) support
ACLs, as do Samba and Konqueror.
Unfortunately, many editors and file managers still lack ACL support. When copying
files with Emacs, for instance, the ACLs of these files are lost. When modifying files
with an editor, the ACLs of files are sometimes preserved and sometimes not, depending
on the backup mode of the editor used. If the editor writes the changes to the original
file, the access ACL is preserved. If the editor saves the updated contents to a new file
that is subsequently renamed to the old filename, the ACLs may be lost, unless the ed-
itor supports ACLs. Except for the star archiver, there are currently no backup applica-
tions that preserve ACLs.

15.6 For More Information

Detailed information about ACLs is available at http://acl.bestbits.at/.
Also see the man pages for getfacl(1), acl(5), and setfacl(1).
314 Installation and Administration