Интерактивная система просмотра системных руководств (man-ов)
aclcheck (3)
>> aclcheck (3) ( Solaris man: Библиотечные вызовы )
NAME
aclcheck - check the validity of an ACL
SYNOPSIS
cc [ flag... ] file... -lsec [ library... ]
#include <sys/acl.h>
intaclcheck(aclent_t *aclbufp, intnentries, int *which);
DESCRIPTION
The aclcheck() function checks the validity of
an ACL pointed to by aclbufp. The nentries argument is the number of entries contained in the buffer. The which parameter returns the index of the first entry that is invalid.
The function verifies that an ACL pointed to by aclbufp is valid according to the following rules:
o
There must be exactly one GROUP_OBJACL entry.
o
There must be exactly one USER_OBJACL entry.
o
There must be exactly one OTHER_OBJACL entry.
o
If there are any GROUPACL entries, then the group ID in each group ACL entry must be unique.
o
If there are any USERACL entries, then the user ID in each user ACL entry must be unique.
o
If there are any GROUP or USERACL entries, then there must be exactly one CLASS_OBJ (ACL mask) entry.
o
If there are any default ACL entries, then the following apply:
o
There must be exactly one default GROUP_OBJACL entry.
o
There must be exactly one default OTHER_OBJACL entry.
o
There must be exactly one default USER_OBJACL entry.
o
If there are any DEF_GROUP entries, then the group ID in each DEF_GROUPACL entry must be unique.
o
If there are any DEF_USER entries, then the user ID in each DEF_USERACL entry must be unique.
o
If there are any DEF_GROUP or DEF_USER entries, then there must be exactly one DEF_CLASS_OBJ (default ACL mask) entry.
o
If any of the above rules are violated, then the function fails with errno set to EINVAL.
RETURN VALUES
If the ACL is valid, alcheck() will return 0. Otherwise errno is set to EINVAL and return code is set to one of the following:
GRP_ERROR
There is more than one GROUP_OBJ or DEF_GROUP_OBJACL entry.
USER_ERROR
There is more than one USER_OBJ or DEF_USER_OBJACL entry.
CLASS_ERROR
There is more than one CLASS_OBJ (ACL mask) or DEF_CLASS_OBJ (default ACL mask) entry.
OTHER_ERROR
There is more than one OTHER_OBJ or DEF_OTHER_OBJACL entry.
DUPLICATE_ERROR
Duplicate entries of USER, GROUP, DEF_USER, or DEF_GROUP.
ENTRY_ERROR
The entry type is invalid.
MISS_ERROR
Missing an entry. The which parameter returns -1 in this case.
MEM_ERROR
The system cannot allocate any memory. The which parameter returns -1 in this case.
ATTRIBUTES
See attributes(5) for descriptions of the following attributes:
