svcadm(8)을 검색하려면 섹션에서 8 을 선택하고, 맨 페이지 이름에 svcadm을 입력하고 검색을 누른다.
vaccess_acl_posix1e(9)
This call implements the logic for the discretionary file secu‐
rity model with POSIX.1e ACL extensions. It accepts the vnodes
type owning UID owning GID access ACL for the file desired access
mode requesting credential and an optional call-by-reference
pointer returning whether or not privilege was required for suc‐
cessful evaluation of the call; the pointer may be set to by the
caller in order not to be informed of privilege information, or
it may point to an integer that will be set to 1 if privilege is
used, and 0 otherwise. This call is intended to support imple‐
mentations of which will use their own access methods to retrieve
the vnode properties, and then invoke in order to perform the ac‐
tual check. Implementations of may choose to implement addi‐
tional security mechanisms whose results will be composed with
the return value. The algorithm used by is based on the POSIX.1e
ACL evaluation algorithm. The algorithm selects a entry from the
access ACL, which may then be composed with an available ACL mask
entry, providing security compatibility. Once appropriate pro‐
tections are selected for the current credential, the requested
access mode, in combination with the vnode type, will be compared
with the discretionary rights available for the credential. If
the rights granted by discretionary protections are insufficient,
then super-user privilege, if available for the credential, will
also be considered. will return 0 on success, or a non-zero er‐
ror value on failure. Permission denied. An attempt was made to
access a file in a way forbidden by its file access permissions.
Operation not permitted. An attempt was made to perform an oper‐
ation limited to processes with appropriate privileges or to the
owner of a file or other resource. This manual page and the cur‐
rent implementation of were written by This manual page should
include a full description of the POSIX.1e ACL evaluation algo‐
rithm, or cross reference another page that does.