Skip to main content

tsmb-acls

This utility manages ACLs for files.

Usage: tsmb-acls [<option>,...] [<command> [<parameter>,...]]

Available Options:

OptionDescription
-hShow help information and exit.
-vShow version information and exit.

Available Commands:

CommandDescription
--getGet security descriptor
--setSet security descriptor

tsmb-acls --get

This subcommand gets ACLS for a file, or decodes a raw security descriptor.

Usage: tsmb-acls --get [<option>,...] [<path>]

Available Options:

OptionDescription
--stdinRead security descriptor from standard input as a hexadecimal character string with optional prefix "hex:". Mutually exclusive with <path> and --map-acls.
--map-acls <STR>Method for retrieving ACLs for a given <path>. Supported methods:
xattr[:<variant>]: Get ACLs saved in a dedicated extended attribute, where <variant> is one of:
    • raw: Self-relative security descriptor in Windows defined native format.
    • v3: Samba-compatible extended attribute security. NTACL without duplication in POSIX ACL.
-h, --helpDisplay help message

Additional Arguments:

ArgumentDescription
<path>The path of the file for which to get the ACL. Not applicable with --stdin.

tsmb-acls --set

Usage: tsmb-acls --set [<option>,...] [<path>] [<sddl-string>]

This subcommand sets ACLS for a file.

Available Options:

OptionDescription
--map-acls <STR>Method for storing ACLs for a given <path>. Supported methods:
xattr[:<variant>]: Get ACLs saved in a dedicated extended attribute, where <variant> is one of:
    • raw: Self-relative security descriptor in Windows defined native format.
    • v3: Samba-compatible extended attribute security. NTACL without duplication in POSIX ACL.
-h, --helpDisplay help message

Additional Arguments:

ArgumentDescription
<path>The path of the file for which to get the ACL.
<sddl-string>An SDDL string representing the security descriptor to set for the file.