IBM General Parallel File System for AIX: Administration and Programming Reference

mmeditacl Command

Name

mmeditacl - Creates or changes a GPFS access control list.

Synopsis

mmeditacl [-d] Filename

Description

Use the mmeditacl command for interactive editing of the ACL of a file or directory. This command uses the default editor, specified in the EDITOR environment variable, to display the current access control information, and allows the file owner to change it. The command verifies the change request with the user before making permanent changes.

The EDITOR environment variable must contain a complete path name, for example:

export EDITOR=/usr/bin/vi

Parameters

Filename

The path name of the file or directory for which the ACL is to be edited. If the -d option is specified, Filename must contain the name of a directory.

Options

-d

Specifies that the default ACL of a directory is to be edited.

Exit status

0

Successful completion.

1

A failure has occurred.

Security

You may only issue the mmeditacl command from a node in the GPFS nodeset where the file system is mounted.

The mmeditacl command may be used to display an ACL by any user with access to the file or directory, but only the owner or root user can change an ACL.

Verify the authentication method set for SP security services:

1. If your authentication method is set to compatibility, Kerberos authentication is required. Issue the k4init command.
2. If your authentication method is set to DCE, dce_login authentication is required.
3. If your authentication method is set to NONE/std, there must be an entry in the /etc/sysctl.mmcmd.acl file on every node in the nodeset for the root user at every other node in the nodeset.

For further information, see the latest IBM Parallel System Support Programs for AIX: Administration Guide, IBM Parallel System Support Programs for AIX: Command and Technical Reference, and RS/6000: Planning Volume 2, Control Workstation and Software Environment manuals at www.rs6000.ibm.com/resource/aix_resource/sp_books/pssp. Search for information on sysctl.

Examples

To edit the ACL for a file named project2.history, enter:

mmeditacl project2.history

The current ACL entries are displayed using the default editor, provided that the EDITOR environment variable specifies a complete path name. When the file is saved, the system displays information similar to:

mmeditacl: 6027-967 Should the modified ACL be applied? (yes) or (no) 

After responding yes, the ACLs are applied.

See also

mmdelacl Command

mmgetacl Command

mmputacl Command

Location

/usr/lpp/mmfs/bin