Endpoint Administration Guide for UNIX › Protecting Files and Programs › Restricting Access to Files and Directories › Restricting File Access › Using Negative Access Control Lists

Using Negative Access Control Lists

You can deny a user or group specific access types using a Negative Access Control List (NACL).

With the CA ControlMinder language (selang), use the following command to deny access:

auth className resourceName [gid(group‑name...)] \
[uid({user‑name...|*})] [deniedaccess(accessvalue)]