ACL refers to access control list, which refers to an access control list for files/directories. ACL is used to set user permissions on files. The functions of ACL: 1. Permissions can be set for users; 2. Permissions can be set for user groups; 3. Sub-files/directories inherit the permissions of the parent directory.

#The operating environment of this tutorial: linux7.3 system, Dell G3 computer.
What is ACL
The full name of ACL is Access Control List, an access control for files/directories Control list. It provides an additional, more flexible permission management mechanism for the file system based on UGO permission management. It is designed as a complement to UNIX file permission management.
ACL allows you to set access permissions for any file/directory to any user or user group.
In Linux systems, ACL can set permissions for a single user to access files. It can also be said that in addition to setting file access permissions in the traditional way (three identities with three permissions), you can also use ACL to set it.
What is the use of ACL
Since it is used as a supplement to UGO permission management, ACL naturally needs to have capabilities that UGO cannot or is difficult to do, such as:
Permissions can be set for users
Permissions can be set for user groups
Sub-files The /directory inherits the permissions of the parent directory
Check whether ACL is supported
ACL requires the cooperation of the Linux kernel and the file system to work. Currently we can Most Linux distributions you see support it by default. But it’s best to check first:
sudo tune2fs -l /dev/sda1 |grep “Default mount options:” Default mount options: user_xattr acl
We can see that acl support has been added by default (Default mount options:).
ACL settings for ordinary files:
setfacl command (set setting, f file file, acl access control list)
Add the ACL of the file
setfacl -m u:zx:--- 1243.txt (zx用户对1243.txt文件没有任何权限) setfacl -m g:zx:--- 1243.txt (zx组对1243.txt文件没有任何权限)
-m parameter indicates modify modification, u indicates settings for user user, zx user name, --- indicates set permissions Information
View the ACL permissions of the file
getfacl 1243.txt (查看文件的ACL权限信息)


Delete the ACL of the file Permissions
setfacl -x u:zx 1243.txt
After setting the ACL permissions, you can see that there is a " " in the file permission information column by viewing the file information

Remove the ACL permission information of the file:
setfacl -b 1243.txt (Remove the ACL permission information of 1342.txt)
ACL settings for directory files
Setting ACL for directory files is to set the ACL for directory files. The created files are subject to permission control.
mask: Indicates the maximum permission range of the user
setfacl -m d:u:zx:r-- 123
d:default (set the default)
Use root in the root directory Create the 123/bbb directory file and set user zx to have read line permissions:
You can see that subsequent new 123 files will be inherited The previous bbbACL permission setting zx only has read permission
Related recommendations: "Linux Video Tutorial"
The above is the detailed content of What is the use of linux ACL. For more information, please follow other related articles on the PHP Chinese website!
Linux's Essential Components: Explained for BeginnersApr 17, 2025 am 12:08 AMThe core components of Linux include the kernel, file system, shell and common tools. 1. The kernel manages hardware resources and provides basic services. 2. The file system organizes and stores data. 3. Shell is the interface for users to interact with the system. 4. Common tools help complete daily tasks.
Linux: A Look at Its Fundamental StructureApr 16, 2025 am 12:01 AMThe basic structure of Linux includes the kernel, file system, and shell. 1) Kernel management hardware resources and use uname-r to view the version. 2) The EXT4 file system supports large files and logs and is created using mkfs.ext4. 3) Shell provides command line interaction such as Bash, and lists files using ls-l.
Linux Operations: System Administration and MaintenanceApr 15, 2025 am 12:10 AMThe key steps in Linux system management and maintenance include: 1) Master the basic knowledge, such as file system structure and user management; 2) Carry out system monitoring and resource management, use top, htop and other tools; 3) Use system logs to troubleshoot, use journalctl and other tools; 4) Write automated scripts and task scheduling, use cron tools; 5) implement security management and protection, configure firewalls through iptables; 6) Carry out performance optimization and best practices, adjust kernel parameters and develop good habits.
Understanding Linux's Maintenance Mode: The EssentialsApr 14, 2025 am 12:04 AMLinux maintenance mode is entered by adding init=/bin/bash or single parameters at startup. 1. Enter maintenance mode: Edit the GRUB menu and add startup parameters. 2. Remount the file system to read and write mode: mount-oremount,rw/. 3. Repair the file system: Use the fsck command, such as fsck/dev/sda1. 4. Back up the data and operate with caution to avoid data loss.
How Debian improves Hadoop data processing speedApr 13, 2025 am 11:54 AMThis article discusses how to improve Hadoop data processing efficiency on Debian systems. Optimization strategies cover hardware upgrades, operating system parameter adjustments, Hadoop configuration modifications, and the use of efficient algorithms and tools. 1. Hardware resource strengthening ensures that all nodes have consistent hardware configurations, especially paying attention to CPU, memory and network equipment performance. Choosing high-performance hardware components is essential to improve overall processing speed. 2. Operating system tunes file descriptors and network connections: Modify the /etc/security/limits.conf file to increase the upper limit of file descriptors and network connections allowed to be opened at the same time by the system. JVM parameter adjustment: Adjust in hadoop-env.sh file
How to learn Debian syslogApr 13, 2025 am 11:51 AMThis guide will guide you to learn how to use Syslog in Debian systems. Syslog is a key service in Linux systems for logging system and application log messages. It helps administrators monitor and analyze system activity to quickly identify and resolve problems. 1. Basic knowledge of Syslog The core functions of Syslog include: centrally collecting and managing log messages; supporting multiple log output formats and target locations (such as files or networks); providing real-time log viewing and filtering functions. 2. Install and configure Syslog (using Rsyslog) The Debian system uses Rsyslog by default. You can install it with the following command: sudoaptupdatesud
How to choose Hadoop version in DebianApr 13, 2025 am 11:48 AMWhen choosing a Hadoop version suitable for Debian system, the following key factors need to be considered: 1. Stability and long-term support: For users who pursue stability and security, it is recommended to choose a Debian stable version, such as Debian11 (Bullseye). This version has been fully tested and has a support cycle of up to five years, which can ensure the stable operation of the system. 2. Package update speed: If you need to use the latest Hadoop features and features, you can consider Debian's unstable version (Sid). However, it should be noted that unstable versions may have compatibility issues and stability risks. 3. Community support and resources: Debian has huge community support, which can provide rich documentation and
TigerVNC share file method on DebianApr 13, 2025 am 11:45 AMThis article describes how to use TigerVNC to share files on Debian systems. You need to install the TigerVNC server first and then configure it. 1. Install the TigerVNC server and open the terminal. Update the software package list: sudoaptupdate to install TigerVNC server: sudoaptinstalltigervnc-standalone-servertigervnc-common 2. Configure TigerVNC server to set VNC server password: vncpasswd Start VNC server: vncserver:1-localhostno


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

AI Hentai Generator
Generate AI Hentai for free.

Hot Article

Hot Tools

SublimeText3 English version
Recommended: Win version, supports code prompts!

SecLists
SecLists is the ultimate security tester's companion. It is a collection of various types of lists that are frequently used during security assessments, all in one place. SecLists helps make security testing more efficient and productive by conveniently providing all the lists a security tester might need. List types include usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and more. The tester can simply pull this repository onto a new test machine and he will have access to every type of list he needs.

SAP NetWeaver Server Adapter for Eclipse
Integrate Eclipse with SAP NetWeaver application server.

VSCode Windows 64-bit Download
A free and powerful IDE editor launched by Microsoft

EditPlus Chinese cracked version
Small size, syntax highlighting, does not support code prompt function






