is a permission mask and can be specified in one of two forms: a sequence of simple rights: F - full access M - modify access ...

   : is a permission mask and can be specified in one of two                      forms:             a sequence of simple rights:                     F  - full access                     M  - modify access                     RX - read and execute access                     R  - read-only access                     W  - write-only access             a comma-separated list in parenthesis of specific rights:                     D    - delete                     RC   - read control                     WDAC - write DAC                     WO   - write owner                     S    - synchronize                     AS   - access system security                     MA   - maximum allowed                     GR   - generic read                     GW   - generic write                     GE   - generic execute                     GA   - generic all                     RD   - read data/list directory                     WD   - write data/add file                     AD   - append data/add subdirectory                     REA  - read extended attributes                     WEA  - write extended attributes                     X    - execute/traverse                     DC   - delete child                     RA   - read attributes                     WA   - write attributes             inheritance rights may precede either form and are applied             only to directories:                     (OI) - object inherit                     (CI) - container inherit                     (IO) - inherit only                     (NP) - don't propagate inherit