29.01.2013 Views

GPFS: Administration and Programming Reference - IRA Home

GPFS: Administration and Programming Reference - IRA Home

GPFS: Administration and Programming Reference - IRA Home

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

#owner:guest<br />

#group:usr<br />

user::rwxc<br />

group::rwx- #effective:rw--<br />

other::--x-<br />

mask::rw-c<br />

user:alpha:rwxc #effective:rw-c<br />

group:audit:rwx- #effective:rw--<br />

group:system:-w--<br />

Although you can issue the mmputacl comm<strong>and</strong> without using the -i option to specify an ACL input file,<br />

<strong>and</strong> make ACL entries through st<strong>and</strong>ard input, you will probably find the -i option more useful for avoiding<br />

errors when creating a new ACL.<br />

See the “mmputacl Comm<strong>and</strong>” on page 233 <strong>and</strong> the “mmgetacl Comm<strong>and</strong>” on page 185 for complete<br />

usage information.<br />

Displaying traditional <strong>GPFS</strong> access control lists<br />

Use the mmgetacl comm<strong>and</strong> to display the access ACL of a file or subdirectory, or the default ACL of a<br />

directory. For example, to display the ACL for the file project2.history, enter:<br />

mmgetacl project2.history<br />

The information sent to st<strong>and</strong>ard output is similar to:<br />

#owner:guest<br />

#group:usr<br />

user::rwxc<br />

group::rwx- #effective:rw--<br />

other::--x-<br />

mask::rw-c<br />

user:alpha:rwxc #effective:rw-c<br />

group:audit:rwx- #effective:rw--<br />

group:system:-w--<br />

The first two lines are comments displayed by the mmgetacl comm<strong>and</strong>, showing the owner <strong>and</strong> owning<br />

group. All entries containing permissions that are not allowed (because they are not set in the mask entry)<br />

display with a comment showing their effective permissions.<br />

See the “mmgetacl Comm<strong>and</strong>” on page 185 for complete usage information.<br />

Applying an existing traditional <strong>GPFS</strong> access control list<br />

To apply the same traditional ACLs from one file or directory to another:<br />

1. Issue the mmgetacl comm<strong>and</strong> with the -o option to place the information in an output file.<br />

2. Apply the ACLs to the new file or directory by issuing the mmputacl comm<strong>and</strong> with the -i option.<br />

For example, use the -o option to specify a file to which the ACL is written:<br />

mmgetacl -o old.acl project2.history<br />

Then, to assign the same permissions to another file, project.notes, enter:<br />

mmputacl -i old.acl project.notes<br />

To confirm the changes, enter:<br />

mmgetacl project.notes<br />

The information sent to st<strong>and</strong>ard output is similar to:<br />

#owner:guest<br />

#group:usr<br />

user::rwxc<br />

Chapter 6. Managing <strong>GPFS</strong> access control lists <strong>and</strong> NFS export 47

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!