.\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.36.
.TH ACL_GRANT "1" "May 2010" "Gentoo" "User Commands"
.SH NAME
acl_grant \- manual page for acl_grant (RSBAC 1.4.4)
.SH DESCRIPTION
acl_grant (RSBAC 1.4.4)
***
Use: acl_grant [switches] subj_type subj_id [rights] target\-type file/dirname(s)
.HP
\fB\-h\fR = this help, \fB\-\-\fR = no more flags,
.HP
\fB\-v\fR = verbose, \fB\-r\fR = recurse into subdirs,
.HP
\fB\-p\fR = print right names, \fB\-s\fR = set rights, not add
.HP
\fB\-k\fR = revoke rights, not add, \fB\-m\fR remove entry (set back to inherit)
.HP
\fB\-b\fR = expect rights as bitstring, \fB\-n\fR = list valid SCD names
.HP
\fB\-d\fR = numeric device specification ({b|c}major[:minor])
.HP
\fB\-u\fR, \fB\-g\fR, \fB\-l\fR = shortcuts for USER, GROUP and ROLE
.HP
\fB\-t\fR = set relative time\-to\-live for this trustee in seconds (add and set only)
.HP
\fB\-T\fR = set absolute time\-to\-live for this trustee in seconds (add and set only)
.HP
\fB\-D\fR = set relative time\-to\-live for this trustee in days (add and set only)
.HP
\fB\-V\fR version = supply RSBAC integer version number for upgrading
.HP
\fB\-N\fR ta = transaction number (default = value of RSBAC_TA, if set, or 0)
.IP
subj_type = USER, GROUP or ROLE,
subj_id = user name or id number,
rights = list of space\-separated right names (requests and ACL specials),
.IP
also request groups R (read requests), RW (read\-write), W (write)
SY (system), SE (security), A (all)
S (ACL special rights)
and NWx with x = S R W C E A F M (similar to well\-known network system)
.IP
target\-type = FILE, DIR, FIFO, SYMLINK, DEV, IPC, SCD, USER, PROCESS, NETDEV,
.IP
NETTEMP_NT, NETTEMP, NETOBJ or FD
.IP
(FD: let acl_grant decide between FILE, DIR, FIFO and SYMLINK, no DEV),
(IPC, USER, PROCESS: only :DEFAULT:
(NETTEMP: no :DEFAULT:
.PP
\- Use name :DEFAULT: for default ACL
.PP
***
Use: acl_grant [switches] subj_type subj_id [rights] target\-type file/dirname(s)
.HP
\fB\-h\fR = this help, \fB\-\-\fR = no more flags,
.HP
\fB\-v\fR = verbose, \fB\-r\fR = recurse into subdirs,
.HP
\fB\-p\fR = print right names, \fB\-s\fR = set rights, not add
.HP
\fB\-k\fR = revoke rights, not add, \fB\-m\fR remove entry (set back to inherit)
.HP
\fB\-b\fR = expect rights as bitstring, \fB\-n\fR = list valid SCD names
.HP
\fB\-d\fR = numeric device specification ({b|c}major[:minor])
.HP
\fB\-u\fR, \fB\-g\fR, \fB\-l\fR = shortcuts for USER, GROUP and ROLE
.HP
\fB\-t\fR = set relative time\-to\-live for this trustee in seconds (add and set only)
.HP
\fB\-T\fR = set absolute time\-to\-live for this trustee in seconds (add and set only)
.HP
\fB\-D\fR = set relative time\-to\-live for this trustee in days (add and set only)
.HP
\fB\-V\fR version = supply RSBAC integer version number for upgrading
.HP
\fB\-N\fR ta = transaction number (default = value of RSBAC_TA, if set, or 0)
.IP
subj_type = USER, GROUP or ROLE,
subj_id = user name or id number,
rights = list of space\-separated right names (requests and ACL specials),
.IP
also request groups R (read requests), RW (read\-write), W (write)
SY (system), SE (security), A (all)
S (ACL special rights)
and NWx with x = S R W C E A F M (similar to well\-known network system)
.IP
target\-type = FILE, DIR, FIFO, SYMLINK, DEV, IPC, SCD, USER, PROCESS, NETDEV,
.IP
NETTEMP_NT, NETTEMP, NETOBJ or FD
.IP
(FD: let acl_grant decide between FILE, DIR, FIFO and SYMLINK, no DEV),
(IPC, USER, PROCESS: only :DEFAULT:
(NETTEMP: no :DEFAULT:
.PP
\- Use name :DEFAULT: for default ACL