Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 04-08-2006 Installation Manual page 308

The option -d of the setfacl command prompts setfacl to perform the
following modifications (option -m) in the default ACL.
Take a closer look at the result of this command:
getfacl mydir
# file: mydir
# owner: tux
# group: project3
user::rwx
user:geeko:rwx
group::r-x
group:mascots:rwx
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:mascots:r-x
default:mask::r-x
default:other::---
getfacl returns both the access ACL and the default ACL. The default ACL
is formed by all lines that start with default. Although you merely executed
the setfacl command with an entry for the mascots group for the default
ACL, setfacl automatically copied all other entries from the access ACL to
create a valid default ACL. Default ACLs do not have an immediate effect on
access permissions. They only come into play when file system objects are cre-
ated. These new objects inherit permissions only from the default ACL of their
parent directory.
2. In the next example, use mkdir to create a subdirectory in mydir, which inherits
the default ACL.
mkdir mydir/mysubdir
getfacl mydir/mysubdir
# file: mydir/mysubdir
# owner: tux
# group: project3
user::rwx
group::r-x
group:mascots:r-x
mask::r-x
other::---
default:user::rwx
default:group::r-x
default:group:mascots:r-x
308 Installation and Administration