vi 仅读取和读取 ACL。 保留 ACL，其他的似乎也没什么用。 但可能有第三方工具。 也许在 Fink/MacPorts 中？
How about the chmod "-a" option?
find . -exec chmod -a "johndoe allow delete,readattr,writeattr,readextattr,writeextattr,readsecurity,writesecurity,chown,read,write,append,execute,list,search,add_file,add_subdirectory,delete_child" {} \;
It will remove all ACL permissions for johndoe on all files recursively from the current directory. (It will print errors for all files without an ACL, but it will still work on the rest of 'em). As you mentioned, you'll have to run this with "inherited" and "deny" as well.
我将 grep ls -le 的输出作为用户名，然后使用您使用 awk 找到的索引号删除规则。 只要你不调用你的用户读、写、拒绝、允许、删除等；）
I'd grep the output of ls -le for the username, then remove the rule with the index number you found using awk. As long as you don't call your users read, write, deny, allow, delete or such ;)
发布评论
评论（3）
chmod“-a”选项怎么样？
它将从当前目录递归地删除 johndoe 对所有文件的所有 ACL 权限。 （它会打印所有没有 ACL 的文件的错误，但它仍然适用于其余文件）。 正如您所提到的，您还必须使用“继承”和“拒绝”来运行它。
编辑：以下是在 Mac OS X 上使用 ACL 的工具：
vi 仅读取和读取 ACL。 保留 ACL，其他的似乎也没什么用。 但可能有第三方工具。 也许在 Fink/MacPorts 中？
How about the chmod "-a" option?
It will remove all ACL permissions for johndoe on all files recursively from the current directory. (It will print errors for all files without an ACL, but it will still work on the rest of 'em). As you mentioned, you'll have to run this with "inherited" and "deny" as well.
EDIT: Here are tools that use ACLs on Mac OS X:
vi only reads & preserves the ACLs, the others don't seem useful, either. But there could be 3rd party tool. Maybe in Fink/MacPorts?
我将 grep ls -le 的输出作为用户名，然后使用您使用 awk 找到的索引号删除规则。 只要你不调用你的用户读、写、拒绝、允许、删除等；）
I'd grep the output of
ls -lefor the username, then remove the rule with the index number you found usingawk. As long as you don't call your users read, write, deny, allow, delete or such ;)查找 / -print0 -type fd | xargs -0 ls -le | xargs -0 more
可能会帮助您开始探索文件系统。
您可以将
more替换为其他命令，例如用于 ACL 输出的grep，以及使用grep处理结果的后续管道。 >fsaclctl。find / -print0 -type fd | xargs -0 ls -le | moremight help you to start exploring the filesystem.
You could replace
morewith another command, such as agrepfor ACL output, and a subsequent pipe to handle the results ofgrepwithfsaclctl.