acl access control listadd

grant /data without change previouse permission

setfacl -m u:xing:rwx /data
check by getfacl /data

# add sticky bit to ensure only the owner can remove the files
chmod o+t /data

#account expires on Feb 11 2010
usermod -e "11 Feb 2010" xing
chage -l xing

#root passwd never expires
chage -E "never" root

# make secondary belong to sysadm group
usermod -G sysadm xing

 

#user eric should be able to write on Document root directory website.
vi /etc/fstab
/dev/vg0/lv0    /var   ext3   defaults,acl   1 1

mount -o remount /var

setfacl -m u:eric:rwx /var/www/example
# effective rights mask that should equal or exceed the user ACL
setfacl -m mask:rwx /var/www/example

getfacl /var/www/example to check

setfacl -m u:eric:rwx /var/www/example/pass

need to point to a file rather than directory
#