tail head cat sleep
QR code linking to this page

Manual Pages  — ACL_VALID


acl_valid, acl_valid_fd_np, acl_valid_file_np, acl_valid_link_np – validate an ACL



Standard C Library (libc, -lc)


#include <sys/types.h>
#include <sys/acl.h>

acl_valid(acl_t acl);

acl_valid_fd_np(int fd, acl_type_t type, acl_t acl);

acl_valid_file_np(const char *path_p, acl_type_t type, acl_t acl);

acl_valid_link_np(const char *path_p, acl_type_t type, acl_t acl);


These functions check that the ACL referred to by the argument acl is valid. The POSIX.1e routine, acl_valid(), checks this validity only with POSIX.1e ACL semantics, and irrespective of the context in which the ACL is to be used. The non-portable forms, acl_valid_fd_np(), acl_valid_file_np(), and acl_valid_link_np() allow an ACL to be checked in the context of a specific acl type, type, and file system object. In environments where additional ACL types are supported than just POSIX.1e, this makes more sense. Whereas acl_valid_file_np() will follow the symlink if the specified path is to a symlink, acl_valid_link_np() will not.

For POSIX.1e semantics, the checks include:

The POSIX.1e acl_valid() function may reorder the ACL for the purposes of verification; the non-portable validation functions will not.


FreeBSD Ns 's support for POSIX.1e interfaces and features is still under development at this time.


Upon successful completion, the value 0 is returned; otherwise the value -1 is returned and the global variable errno is set to indicate the error.


If any of the following conditions occur, these functions shall return -1 and set errno to the corresponding value:
  Search permission is denied for a component of the path prefix, or the object exists and the process does not have appropriate access rights.
  The fd argument is not a valid file descriptor.
  Argument acl does not point to a valid ACL.

One or more of the required ACL entries is not present in acl.

The ACL contains entries that are not unique.

The file system rejects the ACL based on fs-specific semantics issues.

  A component of a pathname exceeded 255 characters, or an entire path name exceeded 1023 characters.
  The named object does not exist, or the path_p argument points to an empty string.
  Insufficient memory available to fulfill request.
  The file system does not support ACL retrieval.


acl(3), acl_get(3), acl_init(3), acl_set(3), posix1e(3)


POSIX.1e is described in IEEE POSIX.1e draft 17. Discussion of the draft continues on the cross-platform POSIX.1e implementation mailing list. To join this list, see the FreeBSD POSIX.1e implementation page for more information.


POSIX.1e support was introduced in FreeBSD 4.0, and development continues.


Robert N M Watson

ACL_VALID (3) December 29, 2002

tail head cat sleep
QR code linking to this page

Please direct any comments about this manual page service to Ben Bullock. Privacy policy.

As soon as we started programming, we found to our surprise that it wasn't as easy to get programs right as we had thought. Debugging had to be discovered. I can remember the exact instant when I realized that a large part of my life from then on was going to be spent in finding mistakes in my own programs.
— Maurice Wilkes