[KLUG Members] ACL and mask

[komal]

I was reading article on ACL and come across effective mask and effective
mask for directory . What does that mean?

Below is the example :-
A POSIX file ACL can be obtained by executing: getfacl a_file It has the
following structure:

# file: testfile <- the file name
# owner: jeremy <-- the file owner
# group: users  <-- the POSIX group owner
user::rwx    <-- perms for the file owner (user)
user:tpot:r-x  <-- perms for the additional user tpot
group::r--    <-- perms for the file group owner (group)
group:engrs:r-- <-- perms for the additonal group engineers
mask:rwx     <-- the mask that is ANDed with groups
other::---    <-- perms applied to everyone else (other)

A directory ACL is obtained the same way and has the following structure:

# file: testdir    <-- the directory name
# owner: jeremy    <-- the directory owner
# group: jeremy    <-- the POSIX group owner
user::rwx       <-- directory perms for owner (user)
group::rwx      <-- directory perms for owning group (group)
mask::rwx       <-- the mask that is ANDed with group perms
other:r-x       <-- perms applied to everyone else (other)
default:user::rwx   <-- inherited owner perms
default:user:tpot:rwx <-- inherited extra perms for user tpot
default:group::r-x  <-- inherited group perms
default:mask:rwx   <-- inherited default mask
default:other:---   <-- inherited permissions for everyone (other)

Regards,

Komal