getcifsacl

Userspace helper to display an ACL in a security descriptor for Common Internet File System (CIFS)

SYNOPSIS

getcifsacl [-v|-r] {file system object}

DESCRIPTION

This tool is part of the cifs-utils suite.

getcifsacl is a userspace helper program for the Linux CIFS client file system. It is intended to display a security descriptor, including DACL and SACL for a file system object.

This program uses a plugin to handle the mapping of SIDs to user and group names. /etc/cifs-utils/idmap-plugin should be a symlink that points to the correct plugin to use.

Fields of an ACE such as SID, type, flags, and mask are displayed separated by /. Numeric values of type, flags, and mask are displayed in hexadecimal format.

OPTIONS

-v

Print version number and exit.

-r

Display a security descriptor in raw mode. Values such as type and flags are displayed in hexadecimal format, a SID is not mapped to a name.

-R

List the ACLs of all files and directories recursively.

NOTES

Kernel support for getcifsacl/setcifsacl utilities was initially introduced in the 2.6.37 kernel.

AUTHOR

Shirish Pargaonkar wrote the getcifsacl program.

The Linux CIFS Mailing list is the preferred place to ask questions regarding these programs.