Endpoint Administration Guide for UNIX › Protecting Files and Programs › Synchronization with Native UNIX Security › HP-UX Limitations

HP-UX Limitations

The ACL of HP‑UX is limited in how it can reflect the ACL of CA ControlMinder.

• In HP‑UX, the ACL assigns access per user and group combination. That is, the assigned access applies to the specified user only when the user's primary group is also specified.

  CA ControlMinder, on the other hand, assigns access per user or per group, but not per combination.

  Accordingly, CA ControlMinder permissions are mapped to HP‑UX user/group combinations in which either the user or the group is set to the equivalent of “*” or “any.”

• HP‑UX does not support ACLs on file‑systems that are under control of the volume manager (LVM). Thus, some important HP‑UX machines are likely to allow ACL synchronization only on the “root” file‑system.
• The ACL of HP‑UX is limited to 16 entries. CA ControlMinder synchronization uses the available entries as efficiently as possible, but 16 entries may not be enough to reflect every CA ControlMinder ACL completely.