From dd4105b0a90c3c146a01e5a7734ee76c3a9aa1cd Mon Sep 17 00:00:00 2001 From: Zbigniew Jędrzejewski-Szmek Date: Sun, 18 Jan 2015 18:22:27 -0500 Subject: shared/acl-util: add mask only when needed, always add base ACLs For ACLs to be valid, a set of entries for user, group, and other must be always present. Always add those entries. While at it, only add the mask ACL if it is actually required, i.e. when at least on ACL for non-owner group or user exists. --- man/tmpfiles.d.xml | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) (limited to 'man') diff --git a/man/tmpfiles.d.xml b/man/tmpfiles.d.xml index 957910dd6d..8815bf9970 100644 --- a/man/tmpfiles.d.xml +++ b/man/tmpfiles.d.xml @@ -306,16 +306,16 @@ a a+ Set POSIX ACLs (access control lists). If - suffixed with +, specified mask will be - added to existing - entries. systemd-tmpfiles does not - automatically add the required base entries for user and - group to the specified mask, so they must be specified - explicitly if + is not used. The - mask will be added if not specified explicitly. - Lines of this type accept shell-style globs in place - of normal path names. This can be useful for allowing - additional access to certain files. + suffixed with +, specified entries will + be added to the existing set. + systemd-tmpfiles will automatically add + the required base entries for user and group based on the + access mode of the file, unless base entries already exist + or are explictly specified. The mask will be added if not + specified explicitly or already present. Lines of this type + accept shell-style globs in place of normal path names. This + can be useful for allowing additional access to certain + files. -- cgit v1.2.3-54-g00ecf