getcifsacl(1)

getcifsacl1

Userspace helper to display an acl in a security descriptor for common internet file system (cifs)

Usage

getcifsacl [{-v | -r}] file system object

Overview

This tool is part of the cifs-utils suite.

getcifsacl is a userspace helper program for the Linux CIFS client file system. It is intended to display a security descriptor, including DACL and SACL for a file system object.

This program uses a plugin to handle the mapping of SIDs to user and group names. /etc/cifs-utils/idmap-plugin should be a symlink that points to the correct plugin to use.

Fields of an ACE such as SID, type, flags, and mask are displayed separated by /. Numeric values of type, flags, and mask are displayed in hexadecimal format.

Options

-v

Print version number and exit.

-r

Display a security descriptor in raw mode. Values such as type and flags are displayed in hexadecimal format, a SID is not mapped to a name.

-R

List the ACLs of all files and directories recursively.

Notes

Kernel support for getcifsacl/setcifsacl utilities was initially introduced in the 2.6.37 kernel.

Releases

8 releases since Debian 7 (Wheezy); the text changed 6 times.

  1. 7
  2. 8–9
  3. 10
  4. 11
  5. 12
  6. 13
  7. Arch

-R since Debian 11 (Bullseye).

Author

Shirish Pargaonkar wrote the getcifsacl program.

The Linux CIFS Mailing list is the preferred place to ask questions regarding these programs.

From cifs-utils 7.9-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.