z/OS UNIX System Services › Manage UNIX with UNIXPRIV Class Profiles › ACL Administration

ACL Administration

To create and administer an ACL for a file, you must have one of the following:

• File ownership
• Superuser authority by having UID(0)
• READ access to SUPERUSER.FILESYS.CHANGEPERMS in the UNIXPRIV class

To use ACLs in access decisions, activate the HFSACL control option. You can define and display ACLs with HFSACL off, however they are not used for authorization checking.

If you have defined default ACLs on directories, the ACLs are inherited by new objects when HFSACL is set off but they are not used for authorization checking.

To activate the HFSACL control option, enter:

F TSS,HFSACL(ON)