| Standards / Extensions | C or C++ | Dependencies |
|---|---|---|
z/OS UNIX |
both | z/OS V1R3 |
#define _OPEN_SYS 1
#include <sys/acl.h>
int acl_get_file (const char *path_p, acl_type_t type_d, lacl_t acl_d, int *num);Use access control lists (ACLs) in conjunction with permission bits to control access to files and directories. Currently, ACLs are supported by the HFS, TFS, and zFS file systems. You must know whether your security product supports ACLs and what rules are used when determining file access. See z/OS UNIX System Services Planning for details.
The acl_get_file() function retrieves an ACL based on type_d argument for an object associated with the object via file name. The ACL is retrieved into the specified working storage pointed to by acl_d. For the type_d = ACL_ACCESS, acl_get_file() will get both the base ACL entries and extended ACL entries. The base ACL entries only apply to the ACL_ACCESS ACL.
The working storage should be allocated using the acl_init() function. If the buffer is not big enough, the acl_get_fd() will fail with errno=E2BIG and num will be filled with the number of ACLs in the ACL pointed to by fd. The user can get a bigger acl_t structure buffer using the num value and reissue the acl_get_fd().
If the object associated with the file descriptor does not have the specified ACL, then an ACL containing zero ACL entries will be returned. If the argument fd refers to an object other than a directory and the value of type_d is a directory/file default, then the function will fail.
The first call to acl_get_entry() following the call to acl_get_fd() obtains the first extended ACL entry in the ACL as ordered by the system. The result of acl_get_fd() can be used to set that same ACL using acl_set_fd() or acl_set_file() using OpType = ACL_ADD.
Upon successful completion, the function returns zero.
If any of the following conditions occur, the acl_get_file() function returns a value of NULL and sets errno to the corresponding value: