1. When to use it
Useful when classic Unix permissions are not enough to express the access model you actually need.
ACL | setfacl | getfacl | permission delegation | data share
2. Base setup
setfacl -m u:backup:rx /srv/data
setfacl -R -m d:u:backup:rx /srv/data
getfacl /srv/data
Adjust host names, IPs, interfaces, paths, and versions to the real system before making the change persistent.
3. Quick verification
getfacl /srv/data
namei -l /srv/data
getfacl -R /srv/data | head -n 30
Confirm that the output matches the expected state before considering the intervention complete.
4. Operational notes
ACLs do not replace traversal permissions on parent directories: always verify the full path.
Quick checklist
[ ] Steps completed\n[ ] Config updated\n[ ] Tests executed\n[ ] Rollback ready\n[ ] Logs checked