File Access Control Library Functions acl_check(3SEC)
NAME
acl_check - check the validity of an ACL
SYNOPSIS
cc [ flag... ] file... -lsec [ library... ]
#include
int acl_check(acl_t *aclp, int isdir);
DESCRIPTION
The acl_check() function checks the validity of an ACL
pointed to by aclp. The isdir argument checks the validity of an ACL that will be applied to a directory. The ACL can be either a POSIX draft ACL as supported by UFS or NFSv4 ACL as supported by ZFS or NFSV4.When the function verifies a POSIX draft ACL, the rules fol-
lowed are described in aclcheck(3SEC). For NFSv4 ACL, the ACL is verified against the following rules: o The inheritance flags are valid. o The ACL must have at least one ACL entry and nomore than {MAX_ACL_ENTRIES}.
o The permission field contains only supported per-
missions. o The entry type is valid.o The flag fields contain only valid flags as sup-
ported by NFSv4/ZFS. If any of the above rules are violated, the function fails with errno set to EINVAL.
RETURN VALUES
If the ACL is valid, acl_check() returns 0. Otherwise errno
is set to EINVAL and the return value is set to one of the following:EACL_INHERIT_ERROR There are invalid inheritance flags
specified.EACL_FLAGS_ERROR There are invalid flags specified on
the ACL that don't map to supportedflags in NFSV4/ZFS ACL model.
SunOS 5.11 Last change: 22 Apr 2008 1
File Access Control Library Functions acl_check(3SEC)
EACL_ENTRY_ERROR The ACL contains an unknown value in
the type field.EACL_MEM_ERROR The system cannot allocate any
memory.EACL_INHERIT_NOTDIR Inheritance flags are only allowed
for ACLs on directories.ATTRIBUTES
See attributes(5) for descriptions of the following attri-
butes:____________________________________________________________
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
|_____________________________|_____________________________|
| Interface Stability | Committed ||_____________________________|_____________________________|
| MT-Level | MT-Safe |
|_____________________________|_____________________________|
SEE ALSO
acl(2), aclcheck(3SEC), aclsort(3SEC), acl(5), attributes(5)SunOS 5.11 Last change: 22 Apr 2008 2