summaryrefslogtreecommitdiff
path: root/man
diff options
context:
space:
mode:
authorZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>2015-01-18 05:02:47 -0500
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>2015-01-22 01:14:53 -0500
commit50d9e46dbb8400d4570781728c63b151d9ca982b (patch)
treec628f4011aaa45315d20106f6f78eb74e127b8b9 /man
parentb705ab6a838937f947216af7b2d1fffb00f8b0dc (diff)
tmpfiles: implement augmenting of existing ACLs
This is much more useful in practice (equivalent to setfacl -m).
Diffstat (limited to 'man')
-rw-r--r--man/tmpfiles.d.xml28
1 files changed, 17 insertions, 11 deletions
diff --git a/man/tmpfiles.d.xml b/man/tmpfiles.d.xml
index ee33afcf6b..957910dd6d 100644
--- a/man/tmpfiles.d.xml
+++ b/man/tmpfiles.d.xml
@@ -234,7 +234,7 @@
to exclude paths from clean-up as controlled with the Age
parameter. Note that lines of this type do not influence the
effect of <varname>r</varname> or <varname>R</varname>
- lines. Lines of this type accept shell-style globs in place
+ lines. Lines of this type accept shell-style globs in place
of normal path names. </para></listitem>
</varlistentry>
@@ -246,7 +246,7 @@
not exclude the content if path is a directory, but only
directory itself. Note that lines of this type do not
influence the effect of <varname>r</varname> or
- <varname>R</varname> lines. Lines of this type accept
+ <varname>R</varname> lines. Lines of this type accept
shell-style globs in place of normal path names.
</para></listitem>
</varlistentry>
@@ -304,19 +304,25 @@
<varlistentry>
<term><varname>a</varname></term>
- <listitem><para>Set POSIX ACLs (access control lists).
- Lines of this type accept shell-style globs in
- place of normal path names. This can be useful for
- allowing additional access to certain files.
- </para></listitem>
+ <term><varname>a+</varname></term>
+ <listitem><para>Set POSIX ACLs (access control lists). If
+ suffixed with <varname>+</varname>, specified mask will be
+ added to existing
+ entries. <command>systemd-tmpfiles</command> does not
+ automatically add the required base entries for user and
+ group to the specified mask, so they must be specified
+ explicitly if <varname>+</varname> is not used. The
+ mask will be added if not specified explicitly.
+ Lines of this type accept shell-style globs in place
+ of normal path names. This can be useful for allowing
+ additional access to certain files. </para></listitem>
</varlistentry>
<varlistentry>
<term><varname>A</varname></term>
- <listitem><para>Recursively set POSIX ACLs. Lines of this
- type accept shell-style globs in place of normal path
- names. This can be useful for allowing additional access to
- certain files.</para></listitem>
+ <term><varname>A+</varname></term>
+ <listitem><para>Same as <varname>a</varname> and
+ <varname>a+</varname>, but recursive.</para></listitem>
</varlistentry>
</variablelist>