Which command shows the current ACLs on a file?

• A. ls -l filename
• B. stat filename
• C. getfacl filename
• D. aclget filename

Answer: (C)

ACLs extend the basic permissions by adding per-user and per-group entries that go beyond owner/group/other. To see exactly what ACLs are in place for a file, use getfacl followed by the filename. It prints all ACL entries (user:, group:, and any default entries for directories) so you can see who has access and what they can do. The standard ls -l output only shows the basic rwx bits and won’t reveal ACLs. stat reports the basic mode and metadata but not the per-entry ACL list. aclget isn’t the typical tool used to view ACLs on most systems.