---
name: "cdist-type__acl"
section: "7"
platform: "linux"
package: "cdist"
version: "7.0.0-5"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/cdist-type__acl"
---

# cdist-type\_\_acl(7)

Set ACL entries

## NAME

cdist-type\_\_acl - Set ACL entries

## DESCRIPTION

Fully supported and tested on Linux (ext4 filesystem), partial support for FreeBSD.

See **setfacl** and **acl** manpages for more details.

One of **--entry** or **--source** must be used.

## OPTIONAL MULTIPLE PARAMETERS

- **entry**

  Set ACL entry following **getfacl** output syntax. Must be used if **--source** is not used.

## OPTIONAL PARAMETERS

- **source**

  Read ACL entries from stdin or file. Ordering of entries is not important. When reading from file, comments and empty lines are ignored. Must be used if **--entry** is not used.

- **file**

  Create/change file with **\_\_file** using **user:group:mode** pattern.

- **directory**

  Create/change directory with **\_\_directory** using **user:group:mode** pattern.

## BOOLEAN PARAMETERS

- **default**

  Set all ACL entries as default too. Only directories can have default ACLs. Setting default ACL in FreeBSD is currently not supported.

- **recursive**

  Make **setfacl** recursive (Linux only), but not **getfacl** in explorer.

- **remove**

  Remove undefined ACL entries. **mask** and **other** entries can't be removed, but only changed.

## EXAMPLES

```
__acl /srv/project \
    --default \
    --recursive \
    --remove \
    --entry user:alice:rwx \
    --entry user:bob:r-x \
    --entry group:project-group:rwx \
    --entry group:some-other-group:r-x \
    --entry mask::r-x \
    --entry other::r-x
# give Alice read-only access to subdir,
# but don't allow her to see parent content.
__acl /srv/project2 \
    --remove \
    --entry default:group:secret-project:rwx \
    --entry group:secret-project:rwx \
    --entry user:alice:--x
__acl /srv/project2/subdir \
    --default \
    --remove \
    --entry group:secret-project:rwx \
    --entry user:alice:r-x
# read acl from stdin
echo 'user:alice:rwx' \
    | __acl /path/to/directory --source -
# create/change directory too
__acl /path/to/directory \
    --default \
    --remove \
    --directory root:root:770 \
    --entry user:nobody:rwx
```

## AUTHORS

Ander Punnar \<ander-at-kvlt-dot-ee\>

## COPYING

Copyright (C) 2018 Ander Punnar. You can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

## COPYRIGHT

ungleich GmbH 2021