I am familiar with setfacl/getfacl. However, I am wondering if there are any other executables/packages that maintain similar functionality with regards to manipulating acl.
I am not looking for anything in particular, I am trying to contemplate the entire scope and logic of acl manipulation to get a complete picture of what is happening and what would be useful.
Examples of interesting behavior:
- When a named group has been assigned, subsequent executions of chmod with regards to the owning group (ie chmod g+/-?) manipulate the acl's mask as opposed to the unnamed acl entry for the owning group. Perhaps this is a peculiarity of the setfacl/getfacl implementation and a different API provides different behavior.
- Assignment of permissions cannot be done by appending permissions, eg: setfacl -m g:1:+rw.
- Assignment cannot be done for all entities of a type, eg: setfacl -m g:*:perms