• applicable for both files and folders
getfacl filename

# -m means modification
setfacl -m u:oggy:rw filename # give user oggy read and write access to filename

setfacl -m g:staff:rw filename # add permission for a group

setfacl -m u:oggy filename # remove a entry

setfacl -b filename # remove all entries

# -R options recursively changes the acl for sub-directories