xref: /freebsd/bin/getfacl/getfacl.1 (revision 24e4dcf4ba5e9dedcf89efd358ea3e1fe5867020)
1.\"-
2.\" Copyright (c) 2000, 2001, 2002 Robert N. M. Watson
3.\" All rights reserved.
4.\"
5.\" This software was developed by Robert Watson for the TrustedBSD Project.
6.\"
7.\" Redistribution and use in source and binary forms, with or without
8.\" modification, are permitted provided that the following conditions
9.\" are met:
10.\" 1. Redistributions of source code must retain the above copyright
11.\"    notice, this list of conditions and the following disclaimer.
12.\" 2. Redistributions in binary form must reproduce the above copyright
13.\"    notice, this list of conditions and the following disclaimer in the
14.\"    documentation and/or other materials provided with the distribution.
15.\"
16.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26.\" SUCH DAMAGE.
27.\"
28.\" Developed by the TrustedBSD Project.
29.\" Support for POSIX.1e access control lists.
30.\"
31.Dd June 19, 2023
32.Dt GETFACL 1
33.Os
34.Sh NAME
35.Nm getfacl
36.Nd get ACL information
37.Sh SYNOPSIS
38.Nm
39.Op Fl dhinqv
40.Op Ar
41.Sh DESCRIPTION
42The
43.Nm
44utility writes discretionary access control information associated with
45the specified file(s) to standard output.
46If the
47.Xr getconf 1
48utility indicates that
49.Brq Va _POSIX_ACL_EXTENDED
50is not in effect for a
51.Ar file
52then the standard discretionary access permissions are interpreted as
53an ACL containing only the required ACL entries.
54.Pp
55The following option is available:
56.Bl -tag -width indent
57.It Fl d , Fl -default
58The operation applies to the default ACL of a directory instead of the
59access ACL.
60An error is generated if a default ACL cannot be associated with
61.Ar file .
62This option is not valid for NFSv4 ACLs.
63.It Fl h
64If the target of the operation is a symbolic link, return the ACL from
65the symbolic link itself rather than following the link.
66.It Fl i
67For NFSv4 ACLs, append numerical ID at the end of each entry containing
68user or group name.
69Ignored for POSIX.1e ACLs.
70.It Fl n , Fl -numeric
71Display user and group IDs numerically rather than converting to
72a user or group name.
73Ignored for POSIX.1e ACLs.
74.It Fl q , Fl -omit-header
75Do not write commented information about file name and ownership.
76This is
77useful when dealing with filenames with unprintable characters.
78.It Fl s , Fl -skip-base
79Skip files that only have a trivial ACL, as defined by
80.Xr acl_is_trivial_np 3 .
81Notably, files with POSIX.1e ACLs that only represent the owner, group and other
82to match the mode of the file will be skipped.
83.It Fl v
84For NFSv4 ACLs, display access mask and flags in a verbose form.
85Ignored for POSIX.1e ACLs.
86.El
87.Pp
88The following operand is available:
89.Bl -tag -width indent
90.It Ar file
91A pathname of a file whose ACL shall be retrieved.
92If
93.Ar file
94is not specified, or a
95.Ar file
96is specified as
97.Fl ,
98then
99.Nm
100reads a list of pathnames, each terminated by one newline character,
101from the standard input.
102.El
103.Pp
104For an explanation of the ACL syntax, see the
105.Xr setfacl 1
106manual page.
107.Sh EXIT STATUS
108.Ex -std
109.Sh EXAMPLES
110.Dl getfacl /
111.Pp
112Retrieve ACL for the directory
113.Pa / .
114.Pp
115.Dl getfacl -d /
116.Pp
117Retrieve the default ACL for the directory
118.Pa / ,
119if any.
120.Sh SEE ALSO
121.Xr setfacl 1 ,
122.Xr acl 3 ,
123.Xr getextattr 8 ,
124.Xr setextattr 8 ,
125.Xr acl 9 ,
126.Xr extattr 9
127.Sh STANDARDS
128The
129.Nm
130utility is expected to be
131.Tn IEEE
132Std 1003.2c compliant.
133.Sh HISTORY
134Extended Attribute and Access Control List support was developed as part
135of the
136.Tn TrustedBSD
137Project and introduced in
138.Fx 5.0 .
139.Sh AUTHORS
140.An Robert N M Watson
141