- applicable for both files and folders
getfacl filename
# -m means modification
setfacl -m u:oggy:rw filename # give user oggy read and write access to filename
setfacl -m g:staff:rw filename # add permission for a group
setfacl -m u:oggy filename # remove a entry
setfacl -b filename # remove all entries
# -R options recursively changes the acl for sub-directories