IBM General Parallel File System for AIX: Administration and Programming Reference

Setting GPFS access control lists

Use the mmputacl command to set the access ACL of a file or subdirectory, or the default ACL of a directory. For example, to set the ACL for a file named project2.history, we might create a file named project2.acl that contains the following:

user::rwx
group::rwx
other::--x
mask::rwx
user:alpha:r-x
group:audit:rw-
group:system:rwx

In the project2.acl file above,

• The first three lines are the required ACL entries setting permissions for the file's owner, the owner's group, and for processes that are not covered by any other ACL entry.
• The last 3 lines contain named entries for specific users and groups.
• Because the ACL contains named entries for specific users and groups, the fourth line contains the required mask entry, which is applied to all named entries (entries other than the user and other).

Once you are satisfied that the correct permissions are set in the ACL file, you can apply them to the target file with the mmputacl command. For example, to set permissions contained in the file project2.acl for the file project2.history, enter:

mmputacl -i project2.acl project2.history

To confirm the changes, enter:

mmgetacl project2.history

The information sent to standard output is:
#owner:guest
#group:usr
user::rwx
group::rwx #effective:rw-
other::--x
mask::rw-
user:alpha:rwx #effective:rw-
group:audit:rwx #effective:rw-
group:system:-w-

Although you can issue the mmputacl command without using the -i option to specify an ACL input file, and make ACL entries through standard input instead, you will probably find the -i option more useful for avoiding errors when creating a new ACL.

See the mmputacl Command and the mmgetacl Command for complete usage information.