acl_check

NAME

LIBRARY

Linux Access Control Lists library (libacl, -lacl).

SYNOPSIS

n sys/types.h n acl/libacl.h

DESCRIPTION

The function checks the ACL referred to by the argument for validity.
The three required entries ACL_USER_OBJ, ACL_GROUP_OBJ, and ACL_OTHER must exist exactly once in the ACL. If the ACL contains any ACL_USER or ACL_GROUP entries, then an ACL_MASK entry is also required. The ACL may contain at most one ACL_MASK entry.
The user identifiers must be unique among all entries of type ACL_USER. The group identifiers must be unique among all entries of type ACL_GROUP.
If the ACL referred to by is invalid, returns a positive error code that indicates which type of error was detected. The following symbolic error codes are defined:
  • ACL_MULTI_ERROR The ACL contains multiple entries that have a tag type that may occur at most once.
  • ACL_DUPLICATE_ERROR The ACL contains multiple ACL_USER entries with the same user ID, or multiple ACL_GROUP entries with the same group ID.
  • ACL_MISS_ERROR A required entry is missing.
  • ACL_ENTRY_ERROR The ACL contains an invalid entry tag type.
The function can be used to translate error codes to text messages.
In addition, if the pointer is not assigns the number of the ACL entry at which the error was detected to the value pointed to by Entries are numbered starting with zero, in the order in which they would be returned by the function.

RETURN VALUE

If successful, the function returns if the ACL referred to by is valid, and a positive error code if the ACL is invalid. Otherwise, a value of is returned and the global variable is set to indicate the error.

ERRORS

If any of the following conditions occur, the function returns and sets to the corresponding value:
  • EINVAL The argument is not a valid pointer to an ACL.

STANDARDS

This is a non-portable, Linux specific extension to the ACL manipulation functions defined in IEEE Std 1003.1e draft 17 (POSIX.1e, abandoned).

SEE ALSO

acl_valid(3) acl(5)

AUTHOR

Written by