Chapter 14. Managing Access Control Lists
| Part IV. Managing Users and Groups |

## Chapter 14. Managing Access Control Lists

To control access to a directory and all of the files in it, AFS associates an access control list (ACL) with it, rather than the mode bits that the UNIX file system (UFS) associates with individual files or directories. AFS ACLs provide more refined access control because there are seven access permissions rather than UFS's three, and there is room for approximately 20 user or group entries on an ACL, rather than just the three UFS entries (owner, group, and other).

## Summary of Instructions

This chapter explains how to perform the following tasks by using the indicated commands:

Examine access control list | fs listacl
Edit ACL's normal permissions section | fs setacl
Edit ACL's negative permissions section | fs setacl with -negative flag
Replace an ACL | fs setacl with -clear flag
Copy an ACL | fs copyacl
Remove obsolete AFS UIDs | fs cleanacl

Displaying and Setting the AFS UID and GID Counters |  | Protecting Data in AFS