Pt. II by Hal Flynn Solaris Default Processes and init.d Pt. Basic Part 2 by Jeremy Rauch RBAC Pt. Sun Solaris File Access Control Lists One of the most convenient security features included with Solaris is also one of the least understood features. That feature is file access control lists, commonly referred to as FACLs or more generically, ACLs.
Every file has a single owner and a single group associated with it.
The owner of the file controls the permissions on it, and can dictate what group of people can access it, assuming they too are in that group of people, and what kind of operations the rest of the world can perform on it. These basic protections work well under most circumstances, but they have their drawbacks. If I want to give my friend Jon access to a file I own, and only Jon, there's no way I can do it with basic permissions, unless a group exists that only the two of us are in. From the administration perspective, a similar headache exists. A company that has separate groups of administrators, all of whom have some administrative duties on various machines, either has to create several groups, which can get awkward and confusing, or turn to ACLs.