Optional - Grant Read Permissions for ACLs

This section should only be followed if you wish to read ACL permissions.

  1. Copy the getfacl executeable:

    cp -a /bin/getfacl /bin/getfacl-fam

  2. Make File Access Manager’s user the only user that can read and execute it.

    chmod 500 /bin/getfacl-fam
    chown famuser /bin/getfacl-fam

  1. 12. Grant the executable the capability to bypass file read permission checks and directory read and execute permission checks

    /sbin/setcap cap_dac_read_search+ep /bin/getfacl-fam