mask:能够赋予的权力

能够赋予指定的人最大的权力

更改：setfacl  -m  更改

[root@localhost 桌面]# getfacl /mnt/westosfile
getfacl: Removing leading '/' from absolute path names
# file: mnt/westosfile
# owner: root
# group: root
user::rw-
group::---
other::---

[root@localhost 桌面]# setfacl -m m::r-- /mnt/wesosfile
setfacl: /mnt/wesosfile: 没有那个文件或目录
[root@localhost 桌面]# setfacl -m u:xizi:rwx /mnt/westosfile
[root@localhost 桌面]# setfacl -m u:westos:rwx /mnt/westosfile
[root@localhost 桌面]# setfacl -m u:westos:rwx /mnt/westosfile
[root@localhost 桌面]# setfacl -m u:linux:rwx /mnt/westosfile
[root@localhost 桌面]# getfacl /mnt/westosfile
getfacl: Removing leading '/' from absolute path names
# file: mnt/westosfile
# owner: root
# group: root
user::rw-
user:westos:rwx
user:xizi:rwx
user:linux:rwx
group::---
mask::rwx
other::---

[root@localhost 桌面]# setfacl -m m::r-x /mnt/westosfile
[root@localhost 桌面]# getfacl /mnt/westosfile
getfacl: Removing leading '/' from absolute path names
# file: mnt/westosfile
# owner: root
# group: root
user::rw-
user:westos:rwx			#effective:r-x
user:xizi:rwx			#effective:r-x
user:linux:rwx			#effective:r-x
group::---
mask::r-x
other::---