2005-12-08 12:14:33 +00:00
|
|
|
=head1 NAME
|
|
|
|
|
2007-11-11 22:54:56 +00:00
|
|
|
fs_copyacl - Copies an ACL from a directory to one or more other directories
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
|
2006-03-01 05:02:29 +00:00
|
|
|
=for html
|
|
|
|
<div class="synopsis">
|
|
|
|
|
|
|
|
B<fs copyacl> S<<< B<-fromdir> <I<source directory (or DFS file)>> >>>
|
|
|
|
S<<< B<-todir> <I<destination directory (or DFS file)>>+ >>>
|
2005-12-09 14:48:56 +00:00
|
|
|
[B<-clear>] [B<-id>] [B<-if>] [-help]
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2006-03-01 05:02:29 +00:00
|
|
|
B<fs co> S<<< B<-f> <I<source directory (or DFS file)>> >>>
|
|
|
|
S<<< B<-t> <I<destination directory (or DFS file)>>+ >>>
|
2005-12-09 14:48:56 +00:00
|
|
|
[B<-c>] [B<-id>] [B<-if>] [-h]
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2006-03-01 05:02:29 +00:00
|
|
|
=for html
|
|
|
|
</div>
|
|
|
|
|
2005-12-08 12:14:33 +00:00
|
|
|
=head1 DESCRIPTION
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
The fs copyacl command copies the access control list (ACL) from a source
|
|
|
|
directory to each specified destination directory. The source directory's
|
|
|
|
ACL is unchanged, and changes to the destination directory's ACL obey the
|
|
|
|
following rules:
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=over 4
|
|
|
|
|
|
|
|
=item *
|
|
|
|
|
|
|
|
If an entry on the source ACL does not already exist on the destination
|
|
|
|
ACL, it is added.
|
|
|
|
|
|
|
|
=item *
|
|
|
|
|
|
|
|
If an entry exists on both the source and destination ACLs, the
|
2005-12-09 14:48:56 +00:00
|
|
|
permissions from the source ACL entry replace the current permissions on
|
|
|
|
the destination ACL entry.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=item *
|
|
|
|
|
|
|
|
If an entry on the destination ACL has no corresponding entry on the
|
|
|
|
source ACL, it is removed if the B<-clear> flag is included and is
|
2005-12-09 14:48:56 +00:00
|
|
|
unchanged otherwise. In other words, if the B<-clear> flag is provided,
|
|
|
|
the source ACL completely replaces the destination ACL.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=back
|
|
|
|
|
|
|
|
When using this command to copy ACLs between objects in DFS filespace
|
2005-12-09 14:48:56 +00:00
|
|
|
accessed via the AFS/DFS Migration Toolkit Protocol Translator, it is
|
|
|
|
possible to specify files, as well as directories, with the B<-fromdir>
|
2010-05-26 18:20:57 +01:00
|
|
|
and B<-todir> arguments.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
=head1 CAUTIONS
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
Do not copy ACLs between AFS and DFS files or directories. The ACL formats
|
|
|
|
are incompatible.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=head1 OPTIONS
|
|
|
|
|
|
|
|
=over 4
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
=item B<-fromdir> <I<source directory>>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
Specifies the source directory from which to copy the ACL. (Specifying an
|
|
|
|
AFS file copies its directory's ACL, but specifying a DFS file copies its
|
|
|
|
own ACL.) A partial pathname is interpreted relative to the current
|
|
|
|
working directory.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
=item B<-todir> <I<destination directory>>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Specifies each directory for which to alter the ACL to match the source
|
|
|
|
ACL. (Specifying an AFS file halts the command with an error, but
|
2005-12-09 14:48:56 +00:00
|
|
|
specifying a DFS file alters the file's ACL). A partial pathname is
|
|
|
|
interpreted relative to the current working directory.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Specify the read/write path to each directory (or DFS file), to avoid the
|
|
|
|
failure that results from attempting to change a read-only volume. By
|
2005-12-09 14:48:56 +00:00
|
|
|
convention, the read/write path is indicated by placing a period before
|
|
|
|
the cell name at the pathname's second level (for example,
|
doc: replace hostnames with IETF example hostnames
There were several different real and made-up hostnames and company names used
throughout our documentation examples.
The IETF has reserved "example.com" and other "example" TLDs for use in
examples (RFC 2606). Replace almost all references to ABC Corporation, DEF
Corporation, and State University, as well as "abc.com", "bigcell.com",
"def.com", "def.gov", "ghi.com", "ghi.gov", "jkl.com", "mit.edu",
"stanford.edu", "state.edu", "stateu.edu", "uncc.edu", and "xyz.com".
Standardize on "Example Corporation", "Example Network", "Example
Organization" (example.com, example.net, and example.org).
The Scout documentation in the Admin Guide contains PNG images that contain
the old cell names, so I left those references until the images can be
replaced.
Change-Id: I4e44815b2d2ffe204810b7fd850842248f67c367
Reviewed-on: http://gerrit.openafs.org/6697
Reviewed-by: Jeffrey Altman <jaltman@secure-endpoints.com>
Tested-by: Jeffrey Altman <jaltman@secure-endpoints.com>
2012-02-11 16:43:30 +00:00
|
|
|
C</afs/.example.com>). For further discussion of the concept of read/write and
|
2005-12-09 14:48:56 +00:00
|
|
|
read-only paths through the filespace, see the B<fs mkmount> reference
|
|
|
|
page.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
=item B<-clear>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Replaces the ACL of each destination directory with the source ACL.
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
=item B<-id>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Modifies the Initial Container ACL of each DFS directory named by the
|
2005-12-09 14:48:56 +00:00
|
|
|
B<-todir> argument, rather than the regular Object ACL. This argument is
|
|
|
|
supported only when both the source and each destination directory reside
|
|
|
|
in DFS and are accessed via the AFS/DFS Migration Toolkit Protocol
|
2005-12-08 12:14:33 +00:00
|
|
|
Translator.
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
=item B<-if>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Modifies the Initial Object ACL of each DFS directory named by the
|
2005-12-09 14:48:56 +00:00
|
|
|
B<-todir> argument, rather than the regular Object ACL. This argument is
|
|
|
|
supported only when both the source and each destination directory reside
|
|
|
|
in DFS and are accessed via the AFS/DFS Migration Toolkit Protocol
|
2005-12-08 12:14:33 +00:00
|
|
|
Translator.
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
=item B<-help>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
Prints the online help for this command. All other valid options are
|
|
|
|
ignored.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=back
|
|
|
|
|
|
|
|
=head1 EXAMPLES
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
The following example command copies the current working directory's ACL
|
|
|
|
to its subdirectory called F<reports>. Note that the source directory's
|
|
|
|
ACL is unaffected. Entries on the F<reports> directory's that are not on
|
|
|
|
the source ACL of the current directory remain unaffected as well, because
|
|
|
|
the B<-clear> flag is not used.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
% fs listacl . reports
|
|
|
|
Access list for . is
|
|
|
|
Normal rights:
|
|
|
|
pat rlidwka
|
|
|
|
smith rlidwk
|
|
|
|
Access list for reports is
|
|
|
|
Normal rights:
|
|
|
|
pat rl
|
|
|
|
pat:friends rl
|
|
|
|
Negative rights
|
|
|
|
jones rlidwka
|
|
|
|
|
|
|
|
% fs copyacl -fromdir . -todir reports
|
2005-12-21 00:41:17 +00:00
|
|
|
|
2005-12-08 12:14:33 +00:00
|
|
|
% fs listacl . reports
|
|
|
|
Access list for . is
|
|
|
|
Normal rights:
|
|
|
|
pat rlidwka
|
|
|
|
smith rlidwk
|
|
|
|
Access list for reports is
|
|
|
|
Normal rights:
|
|
|
|
pat rlidwka
|
|
|
|
pat:friends rl
|
|
|
|
smith rlidwk
|
|
|
|
Negative rights
|
|
|
|
jones rlidwka
|
|
|
|
|
|
|
|
=head1 PRIVILEGE REQUIRED
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
To copy an ACL between AFS objects, the issuer must have the C<l> (lookup)
|
|
|
|
permission on the source directory's ACL and the C<a> (administer)
|
|
|
|
permission on each destination directory's ACL. If the B<-fromdir>
|
|
|
|
argument names a file rather than a directory, the issuer must have both
|
|
|
|
the C<l> and C<r> (read) permissions on the ACL of the file's directory.
|
|
|
|
|
|
|
|
To copy an ACL between DFS objects, the issuer must have the r permission
|
|
|
|
on the source directory or file's ACL and the C<c> (control) permission on
|
|
|
|
each destination directory or file's ACL.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=head1 SEE ALSO
|
|
|
|
|
|
|
|
L<fs_listacl(1)>,
|
|
|
|
L<fs_mkmount(1)>,
|
|
|
|
L<fs_setacl(1)>
|
|
|
|
|
|
|
|
=head1 COPYRIGHT
|
|
|
|
|
|
|
|
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
|
|
|
|
|
|
|
|
This documentation is covered by the IBM Public License Version 1.0. It was
|
|
|
|
converted from HTML to POD by software written by Chas Williams and Russ
|
|
|
|
Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.
|