---
name: "gfsetfacl"
section: "1"
platform: "linux"
package: "gfarm-client"
version: "2.7.20+dfsg-1.2+b1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/gfsetfacl"
---

# gfsetfacl(1)

set Gfarm file access control lists

## NAME

gfsetfacl - set Gfarm file access control lists

## SYNOPSIS

**gfsetfacl** \[*options*\] \[*path*...\]

## DESCRIPTION

**gfsetfacl** changes the Access Control List (ACL) of files or directories in the Gfarm filesystem.

## OPTIONS

- **-b**

  removes all extended ACL entries. (The base ACL entries of the owner, group and others are not removed.)

- **-k**

  removes the only Default ACL.

- **-n**

  do not recalculate the mask entry of the ACL. The default behavior of gfsetfacl is to recalculate the mask entry, if a mask entry is not explicitly given.

- **-r**

  always recalculate the mask entry of the ACL. (Even if a mask entry is explicitly given.) (See the -n option.)

- **-t**

  is test mode. Instead of changing the ACL of any files or directories, the ACL text of input text and the new ACL text are displayed.

- **-m** *acl\_spec*

  This option specifies the ACL entries text to add/replace the ACL entries of a Gfarm files or directories. Multiple ACL entries are separated by comma characters (\`,').

- **-M** *acl\_file*

  This option specifies the file or standard input (\`-') to add/replace the ACL entries of a Gfarm files or directories. This input of ACL file accepts the output of gfgetfacl command.

- **-R**

  changes ACL recursively.

- **-?**

  displays a list of command options.

## ACL ENTRIES

The gfsetfacl command recognizes the following ACL entry formats. The perms field is a combination of characters that indicate the permissions: read (r), write (w), execute (x). A Default ACL entry has a d\[efault:\] prefix.

\[d\[efault:\]u\[ser\]::perms

Permissions of owner.

\[d\[efault:\]u\[ser\]:username:perms

Permissions of a named user.

\[d\[efault:\]g\[roup\]::perms

Permissions of a file group.

\[d\[efault:\]g\[roup\]:groupname:perms

Permissions of a named group.

\[d\[efault:\]m\[ask\]::perms

mask of effective rights

\[d\[efault:\]o\[ther\]::perms

Permissions of others.

## EXAMPLES

Granting read access to a named user

gfsetfacl -m u:testuser:r filename

Replacing the ACL of filename2 by filename1

gfgetfacl filename1 \| gfsetfacl -b -M - filename2

ACL text of long form

```
# comment
user::rw-
user:testuser:rw-       #effective:r--
group::r--
group:testgroup:rw-     #effective:r--
mask::r--
other::r--
default:user::rwx
default:group::r-x
default:other::r-x
```

ACL text of short form

```
u::rw,u:user1:rw,g::r,g:group1:rw,m::r,o::r,d:u::rwx,d:g::rx,d:o::rx
```

## SEE ALSO

[**gfgetfacl**(1)](/gfgetfacl/1.md)