[1f25cea9] | 1 | <?xml version="1.0" encoding="ISO-8859-1"?>
|
---|
| 2 | <!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
|
---|
| 3 | "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
---|
| 4 | <!ENTITY % general-entities SYSTEM "../../general.ent">
|
---|
| 5 | %general-entities;
|
---|
| 6 |
|
---|
[bad63051] | 7 | <!ENTITY acl-download-http "http://download.savannah.gnu.org/releases/acl/acl-&acl-version;.src.tar.gz">
|
---|
[208950b] | 8 | <!ENTITY acl-download-ftp " ">
|
---|
[175af19] | 9 | <!ENTITY acl-md5sum "a61415312426e9c2212bd7dc7929abda">
|
---|
| 10 | <!ENTITY acl-size "384 KB">
|
---|
| 11 | <!ENTITY acl-buildsize "9.1 MB">
|
---|
[1f25cea9] | 12 | <!ENTITY acl-time "0.1 SBU">
|
---|
| 13 | ]>
|
---|
| 14 |
|
---|
| 15 | <sect1 id="acl" xreflabel="acl-&acl-version;">
|
---|
| 16 | <?dbhtml filename="acl.html"?>
|
---|
| 17 |
|
---|
| 18 |
|
---|
| 19 | <title>acl-&acl-version;</title>
|
---|
| 20 |
|
---|
| 21 | <indexterm zone="acl">
|
---|
| 22 | <primary sortas="a-acl">acl</primary>
|
---|
| 23 | </indexterm>
|
---|
| 24 |
|
---|
| 25 | <sect2 role="package">
|
---|
| 26 | <title>Introduction to acl</title>
|
---|
| 27 |
|
---|
| 28 | <para>The <application>acl</application> package contains utilities to
|
---|
| 29 | administer Access Control Lists, which are used to define more fine-grained
|
---|
| 30 | discretionary access rights for files and directories.</para>
|
---|
| 31 |
|
---|
[b5404468] | 32 | &lfs75_checked;
|
---|
[09fde38] | 33 |
|
---|
[1f25cea9] | 34 | <bridgehead renderas="sect3">Package Information</bridgehead>
|
---|
| 35 | <itemizedlist spacing="compact">
|
---|
| 36 | <listitem>
|
---|
| 37 | <para>Download (HTTP): <ulink url="&acl-download-http;"/></para>
|
---|
| 38 | </listitem>
|
---|
[00b2c1b] | 39 | <listitem>
|
---|
[1f25cea9] | 40 | <para>Download (FTP): <ulink url="&acl-download-ftp;"/></para>
|
---|
[0d7900a] | 41 | </listitem>
|
---|
[1f25cea9] | 42 | <listitem>
|
---|
| 43 | <para>Download MD5 sum: &acl-md5sum;</para>
|
---|
| 44 | </listitem>
|
---|
| 45 | <listitem>
|
---|
| 46 | <para>Download size: &acl-size;</para>
|
---|
| 47 | </listitem>
|
---|
| 48 | <listitem>
|
---|
| 49 | <para>Estimated disk space required: &acl-buildsize;</para>
|
---|
| 50 | </listitem>
|
---|
| 51 | <listitem>
|
---|
| 52 | <para>Estimated build time: &acl-time;</para>
|
---|
| 53 | </listitem>
|
---|
| 54 | </itemizedlist>
|
---|
| 55 |
|
---|
| 56 | <bridgehead renderas="sect3">acl Dependencies</bridgehead>
|
---|
| 57 |
|
---|
| 58 | <bridgehead renderas="sect4">Required</bridgehead>
|
---|
| 59 | <para role="required"><xref linkend="attr"/></para>
|
---|
| 60 |
|
---|
| 61 | <para condition="html" role="usernotes">User Notes:
|
---|
| 62 | <ulink url="&blfs-wiki;/acl"/></para>
|
---|
| 63 |
|
---|
| 64 | </sect2>
|
---|
| 65 |
|
---|
| 66 | <sect2 role="installation">
|
---|
| 67 | <title>Installation of acl</title>
|
---|
| 68 |
|
---|
| 69 | <para>Install <application>acl</application> by running the following
|
---|
| 70 | commands:</para>
|
---|
| 71 |
|
---|
[778be14] | 72 | <screen><userinput>sed -i -e 's|/@pkg_name@|&-@pkg_version@|' \
|
---|
[bad63051] | 73 | include/builddefs.in &&
|
---|
[208950b] | 74 |
|
---|
[bcad034] | 75 | INSTALL_USER=root \
|
---|
| 76 | INSTALL_GROUP=root \
|
---|
[45c41547] | 77 | ./configure --prefix=/usr --libexecdir=/usr/lib --disable-static &&
|
---|
[1f25cea9] | 78 | make</userinput></screen>
|
---|
| 79 |
|
---|
| 80 | <para>For meaningful results, the tests need to be carried out on a file
|
---|
| 81 | system that supports extended attributes. It is also required that
|
---|
| 82 | <application>Coreutils</application> is re-installed after
|
---|
| 83 | <application>acl</application> is installed so that the extra acl bit
|
---|
[a52e6d76] | 84 | displays correctly on a <command>ls</command> command.</para>
|
---|
[1f25cea9] | 85 |
|
---|
| 86 | <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
|
---|
| 87 |
|
---|
[bad63051] | 88 | <!-- Package uses DIST_ROOT instead of DESTDIR -->
|
---|
[1faca736] | 89 | <screen role="root"><userinput>make install install-dev install-lib &&
|
---|
| 90 | chmod -v 755 /usr/lib/libacl.so &&
|
---|
| 91 | mv -v /usr/lib/libacl.so.* /lib &&
|
---|
| 92 | ln -sfv ../../lib/libacl.so.1 /usr/lib/libacl.so &&
|
---|
[bad63051] | 93 | install -v -m644 doc/*.txt /usr/share/doc/acl-&acl-version;</userinput></screen>
|
---|
[1f25cea9] | 94 |
|
---|
[c9354ea0] | 95 | <para>You should now re-install <application><ulink
|
---|
[49b9df3c] | 96 | url="&lfs-root;/chapter06/coreutils.html">Coreutils</ulink>
|
---|
[c9354ea0] | 97 | </application> and proceed to run the test suite.</para>
|
---|
[1f25cea9] | 98 |
|
---|
[de5e135] | 99 | <para>There are three sets of tests that come with this package. The local
|
---|
| 100 | partition where the tests are run must be mounted with acl configured as
|
---|
| 101 | described below. Additionally, the users <systemitem
|
---|
| 102 | class="username">bin</systemitem> and <systemitem
|
---|
| 103 | class="username">daemon</systemitem> must be created or modified to have a
|
---|
| 104 | proper shell and home directory and the group <systemitem
|
---|
| 105 | class="groupname">daemon</systemitem> must be a member of the <systemitem
|
---|
| 106 | class="groupname">bin</systemitem> group. The kernel must also be
|
---|
| 107 | configured with the appropriate ACL options (there are nine different
|
---|
| 108 | options).</para>
|
---|
[f3429309] | 109 |
|
---|
[de5e135] | 110 | <para>To run the standard tests run <command>make tests </command>. As
|
---|
| 111 | <systemitem class="username">root</systemitem> user, run <command>make
|
---|
| 112 | root-tests</command>.</para>
|
---|
| 113 |
|
---|
| 114 | <para>The third set of tests are Network File System (NFS) specific. See
|
---|
| 115 | the contents of the test files in the test/nfs/ directory for the setup
|
---|
| 116 | requirements.</para>
|
---|
[1f25cea9] | 117 |
|
---|
| 118 | </sect2>
|
---|
| 119 |
|
---|
[10033899] | 120 | <sect2 role="commands">
|
---|
| 121 | <title>Command Explanations</title>
|
---|
| 122 |
|
---|
| 123 | <para><command>sed -i ... include/builddefs.in</command>: This command
|
---|
[bad63051] | 124 | modifies the documentation directory so that it is a versioned
|
---|
| 125 | directory.</para>
|
---|
[10033899] | 126 |
|
---|
[45c41547] | 127 | <para><command>--libexecdir=/usr/lib</command>: This switch ensures that
|
---|
| 128 | <filename class="libraryfile">libacl.la</filename> is installed in the correct
|
---|
| 129 | directory, and that a spurious
|
---|
| 130 | <filename class="libraryfile">libacl.so</filename> symlink is not created in
|
---|
| 131 | <filename class="directory">/usr/libexec/</filename>.</para>
|
---|
| 132 |
|
---|
[1faca736] | 133 | <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
|
---|
| 134 | href="../../xincludes/static-libraries.xml"/>
|
---|
[a5a3255] | 135 |
|
---|
[10033899] | 136 | </sect2>
|
---|
| 137 |
|
---|
[1f25cea9] | 138 | <sect2 role="configuration">
|
---|
[208950b] | 139 | <title>Configuring acl</title>
|
---|
[1f25cea9] | 140 | <sect3><title>Configuration Information</title>
|
---|
| 141 |
|
---|
| 142 | <para>There is no configuration to <application>acl</application> itself,
|
---|
| 143 | but to get any use out of <application>acl</application>, a filesystem
|
---|
| 144 | needs to support access control lists.</para>
|
---|
| 145 |
|
---|
| 146 | <para>One way to achieve this is to add the acl option to an ext3
|
---|
[208950b] | 147 | filesystem in the <filename>/etc/fstab</filename> file as shown
|
---|
| 148 | below:</para>
|
---|
[1f25cea9] | 149 |
|
---|
| 150 | <screen># file system mount-point type options dump fsck
|
---|
| 151 | # order
|
---|
| 152 |
|
---|
| 153 | /dev/sda1 / ext3 defaults,acl,user_xattr 0 2</screen>
|
---|
| 154 |
|
---|
| 155 | </sect3>
|
---|
| 156 |
|
---|
| 157 | </sect2>
|
---|
| 158 |
|
---|
| 159 | <sect2 role="content">
|
---|
| 160 | <title>Contents</title>
|
---|
| 161 |
|
---|
| 162 | <segmentedlist>
|
---|
| 163 | <segtitle>Installed Programs</segtitle>
|
---|
| 164 | <segtitle>Installed Library</segtitle>
|
---|
[2bb9a3a] | 165 | <segtitle>Installed Directories</segtitle>
|
---|
[1f25cea9] | 166 |
|
---|
| 167 | <seglistitem>
|
---|
| 168 | <seg>chacl, getfacl, and setfacl</seg>
|
---|
| 169 | <seg>libacl.{so,a}</seg>
|
---|
| 170 | <seg>/usr/{include/acl,share/doc/acl-&acl-version;}</seg>
|
---|
| 171 | </seglistitem>
|
---|
| 172 | </segmentedlist>
|
---|
| 173 |
|
---|
| 174 | <variablelist>
|
---|
| 175 | <bridgehead renderas="sect3">Short Descriptions</bridgehead>
|
---|
| 176 | <?dbfo list-presentation="list"?>
|
---|
| 177 | <?dbhtml list-presentation="table"?>
|
---|
| 178 |
|
---|
| 179 | <varlistentry id="chacl">
|
---|
| 180 | <term><command>chacl</command></term>
|
---|
| 181 | <listitem>
|
---|
| 182 | <para>changes the access control list of a file or directory.</para>
|
---|
| 183 | <indexterm zone="acl chacl">
|
---|
| 184 | <primary sortas="b-chacl">chacl</primary>
|
---|
| 185 | </indexterm>
|
---|
| 186 | </listitem>
|
---|
| 187 | </varlistentry>
|
---|
| 188 |
|
---|
| 189 | <varlistentry id="getfacl">
|
---|
| 190 | <term><command>getfacl</command></term>
|
---|
| 191 | <listitem>
|
---|
| 192 | <para>gets file access control lists.</para>
|
---|
| 193 | <indexterm zone="acl getfacl">
|
---|
| 194 | <primary sortas="b-getfacl">getfacl</primary>
|
---|
| 195 | </indexterm>
|
---|
| 196 | </listitem>
|
---|
| 197 | </varlistentry>
|
---|
| 198 |
|
---|
| 199 | <varlistentry id="setfacl">
|
---|
| 200 | <term><command>setfacl</command></term>
|
---|
| 201 | <listitem>
|
---|
| 202 | <para>sets file access control lists.</para>
|
---|
| 203 | <indexterm zone="acl setfacl">
|
---|
| 204 | <primary sortas="b-setfacl">setfacl</primary>
|
---|
| 205 | </indexterm>
|
---|
| 206 | </listitem>
|
---|
| 207 | </varlistentry>
|
---|
| 208 |
|
---|
| 209 | <varlistentry id="libacl">
|
---|
| 210 | <term><filename class='libraryfile'>libacl.{so,a}</filename></term>
|
---|
| 211 | <listitem>
|
---|
| 212 | <para>contains the <application>acl</application> API functions.</para>
|
---|
| 213 | <indexterm zone="acl libacl">
|
---|
| 214 | <primary sortas="c-libacl">libacl.{so,a}</primary>
|
---|
| 215 | </indexterm>
|
---|
| 216 | </listitem>
|
---|
| 217 | </varlistentry>
|
---|
| 218 |
|
---|
| 219 | </variablelist>
|
---|
| 220 |
|
---|
| 221 | </sect2>
|
---|
| 222 |
|
---|
| 223 | </sect1>
|
---|