.\" Access Control Lists manual pages
.\"
.\" (C) 2002 Andreas Gruenbacher, <a.gruenbacher@bestbits.at>
.\"
.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
.\" SUCH DAMAGE.
.\"
.\" Japanese Version Copyright (c) 2005 Yuichi SATO
.\"         all rights reserved.
.\" Translated Tue Apr  5 04:59:02 JST 2005
.\"         by Yuichi SATO <ysato444@yahoo.co.jp>
.\"
.Dd March 23, 2002
.Dt ACL 5
.Os "Linux ACL"
.Sh ̾
.Nm acl
.Nd ꥹ (Access Control Lists)
.Sh 
 man ڡ POSIX ꥹȤˤĤƤ롣
ACL ϥեȥǥ쥯ȥФơ
줿Ǥե (discretionary access right) 
Τ˻Ȥ롣
.Sh ACL 
ƤΥ֥ȤϡΥ֥ȤФǤդΥꤹ
ACL ˴ϢդƤȹͤ뤳ȤǤ롣
 ACL ϥ AC ȸƤФ롣
˲äơǥ쥯ȥ˴Ϣդ줿 ACL 롣
 ACL ϥǥ쥯ȥǺ줿֥Ȥ
ǽΥ ACL ꤹ롣
 ACL ϥǥե ACL ȸƤФ롣
.Sh ACL ȥ
ACL  ACL ȥνǹ롣
ACL ȥϡ줬Ϣդ줿֥Ȥ
 (permission) ꤹ롣
ĤϡġΥ桼ޤϥ桼Υ롼פФ
ɤ߽Ф񤭹ߡ¹ԤεĤȤ߹碌Ǥ롣
.Pp
ACL ȥˤϡȥ꥿
ץȤƤΥȥ꥿ (qualifier)Ĥν礬ޤޤ롣
ǤϡҤȤñ ACL ȥΥȥ꥿ҤɽΤ˻Ȥ
.Pp
ҤϡACL_USER ޤ ACL_GROUP ȤΥȥФơ
줾桼ޤϥ롼פμ̻Ҥɽ
ACL_USER  ACL_GROUP ʳΥΥȥϡ
줿Ҥʤ
.Pp
ʲΥȥ꥿Ƥ:
.Bl -tag -offset indent -width ACL_GROUP_OBJ.
.It ACL_USER_OBJ
ACL_USER_OBJ ȥϥեͭԤФ륢ɽ
.It ACL_USER
ACL_USER ȥϥȥνҤǼ̤桼Ф륢ɽ
.It ACL_GROUP_OBJ
ACL_GROUP_OBJ ȥϥե륰롼פФ륢ɽ
.It ACL_GROUP
ACL_GROUP ȥϥȥνҤǼ̤
롼פФ륢ɽ
.It ACL_MASK
ACL_MASK ȥ ACL_USER, ACL_GROUP_OBJ, ACL_GROUP Υȥ
ĤΥɽ
.It ACL_OTHER
ACL_OTHER ȥ ACL ˤ¾ΤɤΥȥȤޥåʤ
ץΥɽ
.El
.Pp
å¹Ԥ硢¸ (effective) 桼 ID Ф
ACL_USER_OBJ  ACL_USER ȥ꤬ƥȤ롣
¸롼 ID ϡƤ (supplementary) 롼 ID Ʊͤˡ
ACL_GROUP_OBJ  ACL_GROUP ȥФƥƥȤ롣
.Sh ͭ ACL
ͭ ACL ˤ ACL_USER_OBJ, ACL_GROUP_OBJ, ACL_OTHER Τ
줫 1 ĤΥȥ꤬ޤޤ롣
ACL_USER  ACL_GROUP Υȥϡ
0 ʾ ACL ˽и뤳ȤǤ롣
ACL_USER ޤ ACL_GROUP Υȥޤ ACL ϡ
ACL_MASK Υȥ 1 ĤޤޤʤФʤʤ
ACL_USER ޤ ACL_GROUP Υȥ꤬ ACL ˴ޤޤʤ硢
ACL_MASK ȥϥץǤ롣
.Pp
ƤΥ桼 ID ҤϡACL_USER ƤΥȥˤ
դǤʤФʤʤ
ޤƤΥ롼 ID ҤϡACL_GROUP ƤΥȥˤ
դǤʤФʤʤ
.\"Ǿ ACL vs. ĥ줿 ACL
.Pp
.Fn acl_get_file
ؿϡǥ쥯ȥ˥ǥե ACL ϢդƤʤ硢
ǥ쥯ȥΥǥե ACL Ȥơ
ACL ȥ꤬ 1 Ĥޤޤʤ ACL ֤
.Fn acl_set_file
ؿ⡢ACL ȥ꤬ 1 Ĥޤޤʤ ACL 
ǥ쥯ȥФͭʥǥե ACL ȤƼդ롣
Τ褦 ACL ϥǥ쥯ȥ
ǥե ACL ϢդʤȤɽ

.Fn acl_delete_def_file
ؿȤΤǤ롣
.Sh ACL ȥȥեĥӥåȤб
ACL ĤϡեĥӥåȤǻꤵĤ
̽ (superset) Ǥ롣
եͭԤФĤϡ
ACL_USER_OBJ ȥεĤб롣
ACL  ACL_MASK ȥ꤬ʤ硢ե륰롼פФĤϡ
ACL_GROUP_OBJ ȥεĤб롣
ACL  ACL_MASK ȥ꤬硢ե륰롼פФĤϡ
ACL_MASK ȥεĤб롣
¾Υ饹ФĤϡ
ACL_OTHER_OBJ ȥεĤб롣
.Pp
եĥӥåȤѹȡϢդ줿 ACL ȥ꤬ѹ롣
ACL ȥεĤѹȡեĥӥåȤѹ롣
.Sh ֥Ȥκȥǥե ACL
ե륪֥ȤΥ ACL ϡ
.Fn creat ,
.Fn mkdir ,
.Fn mknod ,
.Fn mkfifo ,
.Fn open
ؿΤ줫ǥ֥Ȥ줿Ȥ˽롣
ǥե ACL ǥ쥯ȥȴϢդƤ硢
ե륪֥Ȥؿ
.Va mode
ȥǥ쥯ȥΥǥե ACL Ȥäơ
֥Ȥ ACL ꤵ:
.Bl -enum
.It
֥Ȥϡ줬ޤޤǥ쥯ȥΥǥե ACL 
 ACL ȤƷѾ롣
.It
եĥӥåȤб륢 ACL ȥ꤬졢
.Va mode
ǻꤵƤʤĥӥåȤޤޤʤ褦ˤ롣
.El
.Pp
ǥ쥯ȥ˥ǥե ACL ϢդƤʤ硢
ե륪֥Ȥؿ
.Va mode
ȥեޥ
.Xr ( umask 2
򻲾) Ȥäơ֥Ȥ ACL ꤵ:
.Bl -enum
.It
֥Ȥˤϡ ACL_USER_OBJ, ACL_GROUP_OBJ, ACL_OTHER 
ȥޤॢ ACL Ƥ롣
ΥȥεĤϡեޥǻꤵ줿Ĥꤵ롣
.It
եĥӥåȤб륢 ACL ȥ꤬졢
.Va mode
ǻꤵƤʤĥӥåȤޤޤʤ褦ˤ롣
.El
.Sh å르ꥺ
ץϡACL ݸ줿ե륪֥ȤФơ
ɤ߽Ф񤭹ߡ¹ԡ׵᤹뤳ȤǤ롣
å르ꥺ
֥ȤؤΥĤ뤫ݤꤹ롣
.Bl -enum
.It
.Sy If
ץμ¸桼 ID ե륪֥ȽͭԤΥ桼 ID Ȱפ롣
.Sy then
.Pp
.in +4
.Bd -filled
.Sy if
׵ᤵ줿Ĥ ACL_USER_OBJ ȥ˴ޤޤʤСϵĤ롣
.Pp
.Sy else
ϵݤ롣
.in -4
.Ed
.It
.Sy "else if"
ץμ¸桼 ID  ACL_USER β줫ΥȥνҤȰפ롣
.Sy then
.Pp
.in +4
.Bd -filled
.Sy if
פ ACL_USER ȥ ACL_MASK ȥ
׵ᤵ줿ĤޤޤʤСϵĤ롣
.Pp
.Sy else
ϵݤ롣
.in -4
.Ed
.It
.Sy else if
ץμ¸롼 ID ޤϲ줫롼 ID 
ե륰롼פޤ ACL_GROUP β줫ΥȥνҤȰפ롣
.Sy then
.Pp
.in +4
.Bd -filled
.Sy if
ACL  ACL_MASK ȥޤࡣ
.Sy then
.in +4
.Bd -filled
.Sy if
ACL_MASK ȥꤪӰפ ACL_GROUP_OBJ ޤ ACL_GROUP ȥ
줫ˡ׵ᤵ줿ĤޤޤʤСϵĤ롣
.Pp
.Sy else
ϵݤ롣
.Pp
.in -4
.Ed
.Sy else
(ACL_MASK ȥޤޤʤ ACL_GROUP ȥ¸ߤʤդ뤳)
.in +4
.Bd -filled
.Sy if
ACL_GROUP_OBJ ȥ꤬׵ᤵ줿ĤޤʤСϵĤ롣
.Ed
.Pp
.Sy else
ϵݤ롣
.Pp
.in -4
.Ed
.in -4
.It
.Sy else if
ACL_OTHER ȥ꤬׵ᤵ줿ĤޤʤСϵĤ롣
.It
.Sy else
ϵݤ롣
.El
.\".It
.\"׵ᤵ줿⡼ɤפȥǵĤ뤫å롣
.\".El
.Sh ACL ƥȷ
ACL ɽ뤿ĹƥȷûƥȷƤ롣
ξηˤơACL ȥϥڤ줿 3 ĤΥեɡ
ACL ȥ꥿ACL ȥ꽤ҡǤդΥĤɽ롣
1 ܤΥեɤϰʲΥȥ꥿ɤβ줫ޤ:
.Bl -tag -offset indent -width group.
.It Li user
.Li user
ACL ȥϡեͭ (ȥ꥿ ACL_USER_OBJ) 
ꤵ줿桼 (ȥ꥿ ACL_USER) Ф
Ĥ륢ꤹ롣
.It Li group
.Li group
ACL ȥϡե륰롼 (ȥ꥿ ACL_GROUP_OBJ) 
ꤵ줿롼 (ȥ꥿ ACL_GROUP) Ф
Ĥ륢ꤹ롣
.It Li mask
.Li mask
ACL ȥϡեͭԤФ
.Li user
ȥ
.Li other
ȥ
Ƥ ACL (ȥ꥿ ACL_MASK) ФƵĤ륢Τ
ΤΤꤹ롣
.It Li other
.Li other
ACL ȥϡɤ
.Li user
ACL ȥˤ
.Li group
ACL ȥˤޥåʤ (ȥ꥿ ACL_OTHER) 
ץФƵĤ륢ꤹ롣
.El
.Pp
2 ܤΥեɤϡ
ȥ꥿ ACL_USER ޤ ACL_GROUP Υȥξ硢
ACL ȥ˴ϢդƤ桼ޤϥ롼׼̻Ҥޤࡣ
¾Υȥξ硢Υեɤ϶ˤʤ롣
桼̻Ҥϥ桼̾Ǥ 10 ʿΥ桼 ID ֹǤ褤
롼׼̻Ҥϥ롼̾Ǥ 10 ʿΥ롼 ID ֹǤ褤
.Pp
3 ܤΥեɤǤդΥĤݻ롣
񤭽Фɤ߹ߡ¹ԤεĤϡ
.Li r ,
.Li w ,
.Li x
ȤʸǤν֤ɽ롣
ACL ȥˤεĤʤ硢ʸ
.Li \-
ʸ֤롣
ƥȷɽѴ硢
ݻƤʤĤϻꤹɬפʤ
.Pp
 ACL ȥλϤȽꡢ
եɶڤʸ (ʸ) ľľˤϡ
뤳ȤǤ롣
.Ss Ĺƥȷ
ĹƥȷǤϡ1 Ԥ 1 Ĥ ACL ȥݻ롣
˥ʥС
.No ( Li # )
ǥȤ򳫻Ϥ뤳ȤǽǡԤνޤǤȤˤʤ롣
ACL_MASK ȥ˴ޤޤʤĤ
ACL_USER, ACL_GROUP_OBJ, ACL_GROUP ACL ȥ˴ޤޤ硢
ΥȥθˤϥʥСʸ \(lqeffective:\(rq 
Υȥ¸Ĥ³
ʲĹƥȷǤ:
.Bd -literal -offset indent
user::rw-
user:lisa:rw-         #effective:r--
group::r--
group:toolies:rw-     #effective:r--
mask::r--
other::r--
.Ed
.Ss ûƥȷ
ûƥȷϡޤǶڤ줿 ACL ȥ¤ӤǤꡢ
ϤȤƻȤ롣
ȤϥݡȤƤʤ
ȥ꥿ɤϾάʤʷǤ
1 ʸξάǤǤ롣
.Li user
ξά
.Li u ,
.Li group
ξά
.Li g ,
.Li mask
ξά
.Li m ,
.Li other
ξά
.Li o
Ǥ롣
Ĥˤϡ
.Li r ,
.Li w ,
.Li x 
ȤʸΤ 1 İʾǤդν֤Ǵޤ뤳ȤǤ롣
ʲûƥȷǤ:
.Bd -literal -offset indent
u::rw-,u:lisa:rw-,g::r--,g:toolies:rw-,m::r--,o::r--
g:toolies:rw,u:lisa:rw,u::wr,g::r,o::r,m::r
.Ed
.Sh Ū
IEEE 1003.1e draft 17 ϡ
 ACL_MASK ΥȥޤॢꥹȤƤꡢ
ŪǤϤʤեĥӥåȴ֤бդƤ롣
ɸಽȥ롼פϡIEEE 1003.1 (\(lqPOSIX.1\(rq) ȸߴΤʤ
ץꥱ ACL ĥƥǤⵡǽ뤳Ȥݾڤ뤿ˡ
Ūʣʥ󥿥ե
IEEE 1003.1e draft 17 ˤϡΥ󥿥ե򤹤Ū
 B.23 ˽񤫤Ƥ롣
.Sh ե桼ƥƥѹ
ACL 򥵥ݡȤ륷ƥǤϡե桼ƥƥ
.Xr ls 1 ,
.Xr cp 1 ,
.Xr mv 1
ϼȤưʲΤ褦ѹ:
.Bl -bullet
.It
ǥե ACL ĥե롢ޤɬפȤ 3 İʾ ACL ȥ
ݻ륢 ACL ĥեФơ
.Xr ls 1
桼ƥƥĹ
.Ic "ls \-l"
Ǽ¹Ԥȡ
ץ饹
.No ( Li + )
ʸθɽ롣
.It
.Fl p
ե饰ꤵ줿硢
.Xr cp 1
桼ƥƥ ACL ¸롣
¸ǤʤϷٹ𤬽Ф롣
.It
.Xr mv 1
桼ƥƥϾ ACL ¸롣
¸ǤʤϷٹ𤬽Ф롣
.El
.Pp
.Xr chmod 1
桼ƥƥ
.Xr chmod 2
ƥॳΥ ACL ФƶˤĤƤϡ
.Sx "ACL ȥȥեĥӥåȤб
Ƥ롣
.Sh 
IEEE 1003.1e draft 17 (\(lqPOSIX.1e\(rq) ϡ
IEEE 1003.1 ɸФ뤤ĤΥƥĥˤĤƵҤƤ롣
1003.1e ǤκȤ줿¿ UNIX ϥƥ
POSIX.1e draft 17 ޤϤΥɥեȤΰƤ롣
.Pp
Linux ꥹȤϡ
POSIX.1e ΥꥹȤƤƤδؿåȤ
ĤγĥƤ롣
μ POSIX.1e draft 17 ˴˽򤹤롣
ĥˤϤλݤƤ롣
ꥹȤؿϡ
ACL 饤֥ (libacl, \-lacl) Ƥ롣
POSIX ߴΥ󥿥ե
.Li <sys/acl.h>
إåƤ롣
δؿФ Linux ͭγĥϡ
.Li <acl/libacl.h>
إåƤ롣
.Sh Ϣ
.Xr chmod 1 ,
.Xr creat 2 ,
.Xr getfacl 1 ,
.Xr ls 1 ,
.Xr mkdir 2 ,
.Xr mkfifo 2 ,
.Xr mknod 2 ,
.Xr open 2 ,
.Xr setfacl 1 ,
.Xr stat 2 ,
.Xr umask 1
.Ss POSIX 1003.1e DRAFT 17
.Xr "http://www.guug.de/~winni/posix.1e/download.html"
.Ss ƥˤ POSIX 1003.1e ؿʬ
.Bl -tag -width "MMM"
.It Sy ACL ȥ졼δ
.Xr acl_dup 3 ,
.Xr acl_free 3 ,
.Xr acl_init 3
.It Sy ACL ȥ
.Xr acl_copy_entry 3 ,
.Xr acl_create_entry 3 ,
.Xr acl_delete_entry 3 ,
.Xr acl_get_entry 3 ,
.Xr acl_valid 3
.Pp
.Xr acl_add_perm 3 ,
.Xr acl_calc_mask 3 ,
.Xr acl_clear_perms 3 ,
.Xr acl_delete_perm 3 ,
.Xr acl_get_permset 3 ,
.Xr acl_set_permset 3
.Pp
.Xr acl_get_qualifier 3 ,
.Xr acl_get_tag_type 3 ,
.Xr acl_set_qualifier 3 ,
.Xr acl_set_tag_type 3
.It Sy ֥Ȥ ACL 
.Xr acl_delete_def_file 3 ,
.Xr acl_get_fd 3 ,
.Xr acl_get_file 3 ,
.Xr acl_set_fd 3 ,
.Xr acl_set_file 3
.It Sy ACL Ѵ
.Xr acl_copy_entry 3 ,
.Xr acl_copy_ext 3 ,
.Xr acl_from_text 3 ,
.Xr acl_to_text 3 ,
.Xr acl_size 3
.El
.Ss ͭˤ POSIX 1003.1e ؿʬ
ǽδؿΥ롼פ POSIX 饤ʥꥹȤ
ʬΥƥǥݡȤƤ롣
2 ܤδؿΥ롼פ򥵥ݡȤƤ륷ƥϾʤ
ܿͽꤹ륢ץꥱǤϡ2 ܤΥ롼פ򤱤ɤ
.Pp
.Xr acl_delete_def_file 3 ,
.Xr acl_dup 3 ,
.Xr acl_free 3 ,
.Xr acl_from_text 3 ,
.Xr acl_get_fd 3 ,
.Xr acl_get_file 3 ,
.Xr acl_init 3 ,
.Xr acl_set_fd 3 ,
.Xr acl_set_file 3 ,
.Xr acl_to_text 3 ,
.Xr acl_valid 3
.Pp
.Xr acl_add_perm 3 ,
.Xr acl_calc_mask 3 ,
.Xr acl_clear_perms 3 ,
.Xr acl_copy_entry 3 ,
.Xr acl_copy_ext 3 ,
.Xr acl_copy_int 3 ,
.Xr acl_create_entry 3 ,
.Xr acl_delete_entry 3 ,
.Xr acl_delete_perm 3 ,
.Xr acl_get_entry 3 ,
.Xr acl_get_permset 3 ,
.Xr acl_get_qualifier 3 ,
.Xr acl_get_tag_type 3 ,
.Xr acl_set_permset 3 ,
.Xr acl_set_qualifier 3 ,
.Xr acl_set_tag_type 3 ,
.Xr acl_size 3
.Ss LINUX ĥ
ΰܿΤʤĥϡLinux ƥǤΤͭǤ롣
.Pp
.Xr acl_check 3 ,
.Xr acl_cmp 3 ,
.Xr acl_entries 3 ,
.Xr acl_equiv_mode 3 ,
.Xr acl_error 3 ,
.Xr acl_extended_fd 3 ,
.Xr acl_extended_file 3 ,
.Xr acl_from_mode 3 ,
.Xr acl_get_perm 3 ,
.Xr acl_to_any_text 3
.Sh 
Andreas Gruenbacher, <a.gruenbacher@bestbits.at>