Minimum set of permissions to list directory contents

You can use the command fs help listaclВ to list the complete set of options. Will produce the output: Access list for /afs/cs/user/example is Normal rights: wwwsrv:http-ftp rl system:anyuser rl example rlidwka You can abbreviate 'listacl' to 'la' for the same result. The command fs listacl В will list the ACL of a directory. When specifying directory rights using fs, the following shortcuts may be used: Shortcut The fs command (which should be in /usr/local/bin on Facilitized Unix hosts) is used to list and change ACLs. Normal rights grant the specified access permissions, while negative rights allow one to cancel specific permissions for a user or group on an ACL. The owner of a directory can always change the ACL of a directory any subdirectories in that directory.ДЄllows one to read the contents of file in the directory.ДЄllows one to modify the contents of files in a directory and use chmod on them.ДЄllows programs to lock files in a directory.ДЄn ACL can be either 'normal' or 'negative'. It does not allow the reading of files.ДЄllows one to create new files in a directory or copy new files to a directory.ДЄllows one to remove files and sub-directories from a directory.ДЄllows one to change a directory's ACL. Directory permissions ACLДЄllows one to list the contents of a directory. The lida permissions apply to directories and the rwk permissions apply to files. There are seven standard AFS permissions, each referred to by one of the letters r, l, i, d, w, k and a. You should make sure that directories that are used to store email and other sensitive files have appropriate ACLs. For example, the 'mbox' file created by some Unix mail programs and Emacs 'shell.CKP' files will not be protected by the standard Unix permissions if they are created in AFS. Important note: Because top-level AFS user directories in SCS are created by default with fairly liberal ACLs, you may need to take special precautions to protect confidential information in AFS. In order to access a subdirectory, one must have 'l' (lookup) permissions on all parent directories.When you create a directory, it automatically inherits the ACL of its parent directory.The owner of a directory can always change the ACL on that directory, no matter what the ACL is (so you can fix things if you accidentally remove yourself from the ACL of a directory you own).AFS ignores standard Unix permissions (the ones you set with the chmod command), with the exception of the file owner mode bits (see the section below on protecting individual files for details).ACLs apply only to directories in AFS, not to files.The above ACL gives just 'read' and 'lookup' rights to the special groups Some features of ACLs and AFS access permissions are:

For example, the ACL for the directory /afs/cs.cmu.edu/user/exampleВ has entries for: wwwsrv:http-ftp rl system:anyuser rl example rlidwka

An ACL is a set of Kerberos instances, IP addresses, and/or AFS Groups along with an associated AFS permission. AFS uses Access Control Lists (ACLs) to determine permissions for accessing data.

Minimum set of permissions to list directory contents