1.\" Copyright (c) 1980, 1983, 1986, 1991, 1993 2.\" The Regents of the University of California. All rights reserved. 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. 9.\" 2. Redistributions in binary form must reproduce the above copyright 10.\" notice, this list of conditions and the following disclaimer in the 11.\" documentation and/or other materials provided with the distribution. 12.\" 3. All advertising materials mentioning features or use of this software 13.\" must display the following acknowledgement: 14.\" This product includes software developed by the University of 15.\" California, Berkeley and its contributors. 16.\" 4. Neither the name of the University nor the names of its contributors 17.\" may be used to endorse or promote products derived from this software 18.\" without specific prior written permission. 19.\" 20.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 21.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 22.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 23.\" ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 24.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 25.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 26.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 27.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 28.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 29.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 30.\" SUCH DAMAGE. 31.\" 32.\" @(#)intro.2 8.5 (Berkeley) 2/27/95 33.\" $FreeBSD$ 34.\" 35.Dd February 27, 1995 36.Dt INTRO 2 37.Os 38.Sh NAME 39.Nm intro 40.Nd introduction to system calls and error numbers 41.Sh LIBRARY 42.Lb libc 43.Sh SYNOPSIS 44.In errno.h 45.Sh DESCRIPTION 46This section provides an overview of the system calls, 47their error returns, and other common definitions and concepts. 48.\".Pp 49.\".Sy System call restart 50.\".Pp 51.\"<more later...> 52.Sh RETURN VALUES 53Nearly all of the system calls provide an error number referenced via 54the external identifier errno. 55This identifier is defined in 56.In sys/errno.h 57as 58.Pp 59.Dl extern int * __error(); 60.Dl #define errno (* __error()) 61.Pp 62The 63.Va __error() 64function returns a pointer to a field in the thread specific structure for 65threads other than the initial thread. 66For the initial thread and 67non-threaded processes, 68.Va __error() 69returns a pointer to a global 70.Va errno 71variable that is compatible with the previous definition. 72.Pp 73When a system call detects an error, 74it returns an integer value 75indicating failure (usually -1) 76and sets the variable 77.Va errno 78accordingly. 79<This allows interpretation of the failure on receiving 80a -1 and to take action accordingly.> 81Successful calls never set 82.Va errno ; 83once set, it remains until another error occurs. 84It should only be examined after an error. 85Note that a number of system calls overload the meanings of these 86error numbers, and that the meanings must be interpreted according 87to the type and circumstances of the call. 88.Pp 89The following is a complete list of the errors and their 90names as given in 91.In sys/errno.h . 92.Bl -hang -width Ds 93.It Er 0 Em "Undefined error: 0" . 94Not used. 95.It Er 1 EPERM Em "Operation not permitted" . 96An attempt was made to perform an operation limited to processes 97with appropriate privileges or to the owner of a file or other 98resources. 99.It Er 2 ENOENT Em "No such file or directory" . 100A component of a specified pathname did not exist, or the 101pathname was an empty string. 102.It Er 3 ESRCH Em "No such process" . 103No process could be found corresponding to that specified by the given 104process ID. 105.It Er 4 EINTR Em "Interrupted system call" . 106An asynchronous signal (such as 107.Dv SIGINT 108or 109.Dv SIGQUIT ) 110was caught by the process during the execution of an interruptible 111function. 112If the signal handler performs a normal return, the 113interrupted system call will seem to have returned the error condition. 114.It Er 5 EIO Em "Input/output error" . 115Some physical input or output error occurred. 116This error will not be reported until a subsequent operation on the same file 117descriptor and may be lost (over written) by any subsequent errors. 118.It Er 6 ENXIO Em "Device not configured" . 119Input or output on a special file referred to a device that did not 120exist, or 121made a request beyond the limits of the device. 122This error may also occur when, for example, 123a tape drive is not online or no disk pack is 124loaded on a drive. 125.It Er 7 E2BIG Em "Argument list too long" . 126The number of bytes used for the argument and environment 127list of the new process exceeded the current limit 128of 65536 bytes 129.Dv ( NCARGS 130in 131.In sys/param.h ) . 132.It Er 8 ENOEXEC Em "Exec format error" . 133A request was made to execute a file 134that, although it has the appropriate permissions, 135was not in the format required for an 136executable file. 137.It Er 9 EBADF Em "Bad file descriptor" . 138A file descriptor argument was out of range, referred to no open file, 139or a read (write) request was made to a file that was only open for 140writing (reading). 141.Pp 142.It Er 10 ECHILD Em "\&No child processes" . 143A 144.Xr wait 2 145or 146.Xr waitpid 2 147function was executed by a process that had no existing or unwaited-for 148child processes. 149.It Er 11 EDEADLK Em "Resource deadlock avoided" . 150An attempt was made to lock a system resource that 151would have resulted in a deadlock situation. 152.It Er 12 ENOMEM Em "Cannot allocate memory" . 153The new process image required more memory than was allowed by the hardware 154or by system-imposed memory management constraints. 155A lack of swap space is normally temporary; however, 156a lack of core is not. 157Soft limits may be increased to their corresponding hard limits. 158.It Er 13 EACCES Em "Permission denied" . 159An attempt was made to access a file in a way forbidden 160by its file access permissions. 161.It Er 14 EFAULT Em "Bad address" . 162The system detected an invalid address in attempting to 163use an argument of a call. 164.It Er 15 ENOTBLK Em "Block device required" . 165A block device operation was attempted on a non-block device or file. 166.It Er 16 EBUSY Em "Device busy" . 167An attempt to use a system resource which was in use at the time 168in a manner which would have conflicted with the request. 169.It Er 17 EEXIST Em "File exists" . 170An existing file was mentioned in an inappropriate context, 171for instance, as the new link name in a 172.Xr link 2 173system call. 174.It Er 18 EXDEV Em "Cross-device link" . 175A hard link to a file on another file system 176was attempted. 177.It Er 19 ENODEV Em "Operation not supported by device" . 178An attempt was made to apply an inappropriate 179function to a device, 180for example, 181trying to read a write-only device such as a printer. 182.It Er 20 ENOTDIR Em "Not a directory" . 183A component of the specified pathname existed, but it was 184not a directory, when a directory was expected. 185.It Er 21 EISDIR Em "Is a directory" . 186An attempt was made to open a directory with write mode specified. 187.It Er 22 EINVAL Em "Invalid argument" . 188Some invalid argument was supplied. 189(For example, 190specifying an undefined signal to a 191.Xr signal 3 192function 193or a 194.Xr kill 2 195system call). 196.It Er 23 ENFILE Em "Too many open files in system" . 197Maximum number of file descriptors allowable on the system 198has been reached and a requests for an open cannot be satisfied 199until at least one has been closed. 200.It Er 24 EMFILE Em "Too many open files" . 201<As released, the limit on the number of 202open files per process is 64.> 203The 204.Xr getdtablesize 2 205system call will obtain the current limit. 206.It Er 25 ENOTTY Em "Inappropriate ioctl for device" . 207A control function (see 208.Xr ioctl 2 ) 209was attempted for a file or 210special device for which the operation was inappropriate. 211.It Er 26 ETXTBSY Em "Text file busy" . 212The new process was a pure procedure (shared text) file 213which was open for writing by another process, or 214while the pure procedure file was being executed an 215.Xr open 2 216call requested write access. 217.It Er 27 EFBIG Em "File too large" . 218The size of a file exceeded the maximum (about 219.if t 2\u\s-231\s+2\d 220.if n 2.1E9 221bytes). 222.It Er 28 ENOSPC Em "No space left on device" . 223A 224.Xr write 2 225to an ordinary file, the creation of a 226directory or symbolic link, or the creation of a directory 227entry failed because no more disk blocks were available 228on the file system, or the allocation of an inode for a newly 229created file failed because no more inodes were available 230on the file system. 231.It Er 29 ESPIPE Em "Illegal seek" . 232An 233.Xr lseek 2 234system call was issued on a socket, pipe or 235.Tn FIFO . 236.It Er 30 EROFS Em "Read-only file system" . 237An attempt was made to modify a file or directory 238on a file system that was read-only at the time. 239.It Er 31 EMLINK Em "Too many links" . 240Maximum allowable hard links to a single file has been exceeded (limit 241of 32767 hard links per file). 242.It Er 32 EPIPE Em "Broken pipe" . 243A write on a pipe, socket or 244.Tn FIFO 245for which there is no process 246to read the data. 247.It Er 33 EDOM Em "Numerical argument out of domain" . 248A numerical input argument was outside the defined domain of the mathematical 249function. 250.It Er 34 ERANGE Em "Result too large" . 251A numerical result of the function was too large to fit in the 252available space (perhaps exceeded precision). 253.It Er 35 EAGAIN Em "Resource temporarily unavailable" . 254This is a temporary condition and later calls to the 255same routine may complete normally. 256.It Er 36 EINPROGRESS Em "Operation now in progress" . 257An operation that takes a long time to complete (such as 258a 259.Xr connect 2 ) 260was attempted on a non-blocking object (see 261.Xr fcntl 2 ) . 262.It Er 37 EALREADY Em "Operation already in progress" . 263An operation was attempted on a non-blocking object that already 264had an operation in progress. 265.It Er 38 ENOTSOCK Em "Socket operation on non-socket" . 266Self-explanatory. 267.It Er 39 EDESTADDRREQ Em "Destination address required" . 268A required address was omitted from an operation on a socket. 269.It Er 40 EMSGSIZE Em "Message too long" . 270A message sent on a socket was larger than the internal message buffer 271or some other network limit. 272.It Er 41 EPROTOTYPE Em "Protocol wrong type for socket" . 273A protocol was specified that does not support the semantics of the 274socket type requested. 275For example, you cannot use the 276.Tn ARPA 277Internet 278.Tn UDP 279protocol with type 280.Dv SOCK_STREAM . 281.It Er 42 ENOPROTOOPT Em "Protocol not available" . 282A bad option or level was specified in a 283.Xr getsockopt 2 284or 285.Xr setsockopt 2 286call. 287.It Er 43 EPROTONOSUPPORT Em "Protocol not supported" . 288The protocol has not been configured into the 289system or no implementation for it exists. 290.It Er 44 ESOCKTNOSUPPORT Em "Socket type not supported" . 291The support for the socket type has not been configured into the 292system or no implementation for it exists. 293.It Er 45 EOPNOTSUPP Em "Operation not supported" . 294The attempted operation is not supported for the type of object referenced. 295Usually this occurs when a file descriptor refers to a file or socket 296that cannot support this operation, 297for example, trying to 298.Em accept 299a connection on a datagram socket. 300.It Er 46 EPFNOSUPPORT Em "Protocol family not supported" . 301The protocol family has not been configured into the 302system or no implementation for it exists. 303.It Er 47 EAFNOSUPPORT Em "Address family not supported by protocol family" . 304An address incompatible with the requested protocol was used. 305For example, you shouldn't necessarily expect to be able to use 306.Tn NS 307addresses with 308.Tn ARPA 309Internet protocols. 310.It Er 48 EADDRINUSE Em "Address already in use" . 311Only one usage of each address is normally permitted. 312.Pp 313.It Er 49 EADDRNOTAVAIL Em "Cannot assign requested address" . 314Normally results from an attempt to create a socket with an 315address not on this machine. 316.It Er 50 ENETDOWN Em "Network is down" . 317A socket operation encountered a dead network. 318.It Er 51 ENETUNREACH Em "Network is unreachable" . 319A socket operation was attempted to an unreachable network. 320.It Er 52 ENETRESET Em "Network dropped connection on reset" . 321The host you were connected to crashed and rebooted. 322.It Er 53 ECONNABORTED Em "Software caused connection abort" . 323A connection abort was caused internal to your host machine. 324.It Er 54 ECONNRESET Em "Connection reset by peer" . 325A connection was forcibly closed by a peer. 326This normally 327results from a loss of the connection on the remote socket 328due to a timeout or a reboot. 329.It Er 55 ENOBUFS Em "\&No buffer space available" . 330An operation on a socket or pipe was not performed because 331the system lacked sufficient buffer space or because a queue was full. 332.It Er 56 EISCONN Em "Socket is already connected" . 333A 334.Xr connect 2 335request was made on an already connected socket; or, 336a 337.Xr sendto 2 338or 339.Xr sendmsg 2 340request on a connected socket specified a destination 341when already connected. 342.It Er 57 ENOTCONN Em "Socket is not connected" . 343An request to send or receive data was disallowed because 344the socket was not connected and (when sending on a datagram socket) 345no address was supplied. 346.It Er 58 ESHUTDOWN Em "Cannot send after socket shutdown" . 347A request to send data was disallowed because the socket 348had already been shut down with a previous 349.Xr shutdown 2 350call. 351.It Er 60 ETIMEDOUT Em "Operation timed out" . 352A 353.Xr connect 2 354or 355.Xr send 2 356request failed because the connected party did not 357properly respond after a period of time. 358(The timeout 359period is dependent on the communication protocol.) 360.It Er 61 ECONNREFUSED Em "Connection refused" . 361No connection could be made because the target machine actively 362refused it. 363This usually results from trying to connect 364to a service that is inactive on the foreign host. 365.It Er 62 ELOOP Em "Too many levels of symbolic links" . 366A path name lookup involved more than 32 367.Pq Dv MAXSYMLINKS 368symbolic links. 369.It Er 63 ENAMETOOLONG Em "File name too long" . 370A component of a path name exceeded 255 371.Pq Dv MAXNAMELEN 372characters, or an entire 373path name exceeded 1023 374.Pq Dv MAXPATHLEN Ns -1 375characters. 376.It Er 64 EHOSTDOWN Em "Host is down" . 377A socket operation failed because the destination host was down. 378.It Er 65 EHOSTUNREACH Em "No route to host" . 379A socket operation was attempted to an unreachable host. 380.It Er 66 ENOTEMPTY Em "Directory not empty" . 381A directory with entries other than 382.Ql .\& 383and 384.Ql ..\& 385was supplied to a remove directory or rename call. 386.It Er 67 EPROCLIM Em "Too many processes" . 387.It Er 68 EUSERS Em "Too many users" . 388The quota system ran out of table entries. 389.It Er 69 EDQUOT Em "Disc quota exceeded" . 390A 391.Xr write 2 392to an ordinary file, the creation of a 393directory or symbolic link, or the creation of a directory 394entry failed because the user's quota of disk blocks was 395exhausted, or the allocation of an inode for a newly 396created file failed because the user's quota of inodes 397was exhausted. 398.It Er 70 ESTALE Em "Stale NFS file handle" . 399An attempt was made to access an open file (on an 400.Tn NFS 401file system) 402which is now unavailable as referenced by the file descriptor. 403This may indicate the file was deleted on the 404.Tn NFS 405server or some 406other catastrophic event occurred. 407.It Er 72 EBADRPC Em "RPC struct is bad" . 408Exchange of 409.Tn RPC 410information was unsuccessful. 411.It Er 73 ERPCMISMATCH Em "RPC version wrong" . 412The version of 413.Tn RPC 414on the remote peer is not compatible with 415the local version. 416.It Er 74 EPROGUNAVAIL Em "RPC prog. not avail" . 417The requested program is not registered on the remote host. 418.It Er 75 EPROGMISMATCH Em "Program version wrong" . 419The requested version of the program is not available 420on the remote host 421.Pq Tn RPC . 422.It Er 76 EPROCUNAVAIL Em "Bad procedure for program" . 423An 424.Tn RPC 425call was attempted for a procedure which doesn't exist 426in the remote program. 427.It Er 77 ENOLCK Em "No locks available" . 428A system-imposed limit on the number of simultaneous file 429locks was reached. 430.It Er 78 ENOSYS Em "Function not implemented" . 431Attempted a system call that is not available on this 432system. 433.It Er 79 EFTYPE Em "Inappropriate file type or format" . 434The file was the wrong type for the operation, or a data file had 435the wrong format. 436.It Er 80 EAUTH Em "Authentication error" . 437Attempted to use an invalid authentication ticket to mount a 438.Tn NFS 439file system. 440.It Er 81 ENEEDAUTH Em "Need authenticator" . 441An authentication ticket must be obtained before the given 442.Tn NFS 443file system may be mounted. 444.It Er 82 EIDRM Em "Identifier removed" . 445An IPC identifier was removed while the current process was waiting on it. 446.It Er 83 ENOMSG Em "No message of desired type" . 447An IPC message queue does not contain a message of the desired type, or a 448message catalog does not contain the requested message. 449.It Er 84 EOVERFLOW Em "Value too large to be stored in data type" . 450A numerical result of the function was too large to be stored in the caller 451provided space. 452.It Er 85 ECANCELED Em "Operation canceled" . 453The scheduled operation was canceled. 454.It Er 86 EILSEQ Em "Illegal byte sequence" . 455While decoding a multibyte character the function came along an 456invalid or an incomplete sequence of bytes or the given wide 457character is invalid. 458.It Er 87 ENOATTR Em "Attribute not found" . 459The specified extended attribute does not exist. 460.It Er 88 EDOOFUS Em "Programming error" . 461A function or API is being abused in a way which could only be detected 462at run-time. 463.El 464.Sh DEFINITIONS 465.Bl -tag -width Ds 466.It Process ID . 467Each active process in the system is uniquely identified by a non-negative 468integer called a process ID. 469The range of this ID is from 0 to 99999. 470.It Parent process ID 471A new process is created by a currently active process; (see 472.Xr fork 2 ) . 473The parent process ID of a process is initially the process ID of its creator. 474If the creating process exits, 475the parent process ID of each child is set to the ID of a system process, 476.Xr init 8 . 477.It Process Group 478Each active process is a member of a process group that is identified by 479a non-negative integer called the process group ID. 480This is the process 481ID of the group leader. 482This grouping permits the signaling of related 483processes (see 484.Xr termios 4 ) 485and the job control mechanisms of 486.Xr csh 1 . 487.It Session 488A session is a set of one or more process groups. 489A session is created by a successful call to 490.Xr setsid 2 , 491which causes the caller to become the only member of the only process 492group in the new session. 493.It Session leader 494A process that has created a new session by a successful call to 495.Xr setsid 2 , 496is known as a session leader. 497Only a session leader may acquire a terminal as its controlling terminal (see 498.Xr termios 4 ) . 499.It Controlling process 500A session leader with a controlling terminal is a controlling process. 501.It Controlling terminal 502A terminal that is associated with a session is known as the controlling 503terminal for that session and its members. 504.It "Terminal Process Group ID" 505A terminal may be acquired by a session leader as its controlling terminal. 506Once a terminal is associated with a session, any of the process groups 507within the session may be placed into the foreground by setting 508the terminal process group ID to the ID of the process group. 509This facility is used 510to arbitrate between multiple jobs contending for the same terminal; 511(see 512.Xr csh 1 513and 514.Xr tty 4 ) . 515.It "Orphaned Process Group" 516A process group is considered to be 517.Em orphaned 518if it is not under the control of a job control shell. 519More precisely, a process group is orphaned 520when none of its members has a parent process that is in the same session 521as the group, 522but is in a different process group. 523Note that when a process exits, the parent process for its children 524is changed to be 525.Xr init 8 , 526which is in a separate session. 527Not all members of an orphaned process group are necessarily orphaned 528processes (those whose creating process has exited). 529The process group of a session leader is orphaned by definition. 530.It "Real User ID and Real Group ID" 531Each user on the system is identified by a positive integer 532termed the real user ID. 533.Pp 534Each user is also a member of one or more groups. 535One of these groups is distinguished from others and 536used in implementing accounting facilities. 537The positive 538integer corresponding to this distinguished group is termed 539the real group ID. 540.Pp 541All processes have a real user ID and real group ID. 542These are initialized from the equivalent attributes 543of the process that created it. 544.It "Effective User Id, Effective Group Id, and Group Access List" 545Access to system resources is governed by two values: 546the effective user ID, and the group access list. 547The first member of the group access list is also known as the 548effective group ID. 549(In POSIX.1, the group access list is known as the set of supplementary 550group IDs, and it is unspecified whether the effective group ID is 551a member of the list.) 552.Pp 553The effective user ID and effective group ID are initially the 554process's real user ID and real group ID respectively. 555Either 556may be modified through execution of a set-user-ID or set-group-ID 557file (possibly by one its ancestors) (see 558.Xr execve 2 ) . 559By convention, the effective group ID (the first member of the group access 560list) is duplicated, so that the execution of a set-group-ID program 561does not result in the loss of the original (real) group ID. 562.Pp 563The group access list is a set of group IDs 564used only in determining resource accessibility. 565Access checks 566are performed as described below in ``File Access Permissions''. 567.It "Saved Set User ID and Saved Set Group ID" 568When a process executes a new file, the effective user ID is set 569to the owner of the file if the file is set-user-ID, and the effective 570group ID (first element of the group access list) is set to the group 571of the file if the file is set-group-ID. 572The effective user ID of the process is then recorded as the saved set-user-ID, 573and the effective group ID of the process is recorded as the saved set-group-ID. 574These values may be used to regain those values as the effective user 575or group ID after reverting to the real ID (see 576.Xr setuid 2 ) . 577(In POSIX.1, the saved set-user-ID and saved set-group-ID are optional, 578and are used in setuid and setgid, but this does not work as desired 579for the super-user.) 580.It Super-user 581A process is recognized as a 582.Em super-user 583process and is granted special privileges if its effective user ID is 0. 584.It Descriptor 585An integer assigned by the system when a file is referenced 586by 587.Xr open 2 588or 589.Xr dup 2 , 590or when a socket is created by 591.Xr pipe 2 , 592.Xr socket 2 593or 594.Xr socketpair 2 , 595which uniquely identifies an access path to that file or socket from 596a given process or any of its children. 597.It File Name 598Names consisting of up to 255 599.Pq Dv MAXNAMELEN 600characters may be used to name 601an ordinary file, special file, or directory. 602.Pp 603These characters may be selected from the set of all 604.Tn ASCII 605character 606excluding 0 (NUL) and the 607.Tn ASCII 608code for 609.Ql \&/ 610(slash). 611.Pp 612Note that it is generally unwise to use 613.Ql \&* , 614.Ql \&? , 615.Ql \&[ 616or 617.Ql \&] 618as part of 619file names because of the special meaning attached to these characters 620by the shell. 621.It Path Name 622A path name is a 623.Tn NUL Ns -terminated 624character string starting with an 625optional slash 626.Ql \&/ , 627followed by zero or more directory names separated 628by slashes, optionally followed by a file name. 629The total length of a path name must be less than 1024 630.Pq Dv MAXPATHLEN 631characters. 632.Pp 633If a path name begins with a slash, the path search begins at the 634.Em root 635directory. 636Otherwise, the search begins from the current working directory. 637A slash by itself names the root directory. 638An empty 639pathname refers to the current directory. 640.It Directory 641A directory is a special type of file that contains entries 642that are references to other files. 643Directory entries are called links. 644By convention, a directory 645contains at least two links, 646.Ql .\& 647and 648.Ql \&.. , 649referred to as 650.Em dot 651and 652.Em dot-dot 653respectively. 654Dot refers to the directory itself and 655dot-dot refers to its parent directory. 656.It "Root Directory and Current Working Directory" 657Each process has associated with it a concept of a root directory 658and a current working directory for the purpose of resolving path 659name searches. 660A process's root directory need not be the root 661directory of the root file system. 662.It File Access Permissions 663Every file in the file system has a set of access permissions. 664These permissions are used in determining whether a process 665may perform a requested operation on the file (such as opening 666a file for writing). 667Access permissions are established at the 668time a file is created. 669They may be changed at some later time 670through the 671.Xr chmod 2 672call. 673.Pp 674File access is broken down according to whether a file may be: read, 675written, or executed. 676Directory files use the execute 677permission to control if the directory may be searched. 678.Pp 679File access permissions are interpreted by the system as 680they apply to three different classes of users: the owner 681of the file, those users in the file's group, anyone else. 682Every file has an independent set of access permissions for 683each of these classes. 684When an access check is made, the system 685decides if permission should be granted by checking the access 686information applicable to the caller. 687.Pp 688Read, write, and execute/search permissions on 689a file are granted to a process if: 690.Pp 691The process's effective user ID is that of the super-user. 692(Note: 693even the super-user cannot execute a non-executable file.) 694.Pp 695The process's effective user ID matches the user ID of the owner 696of the file and the owner permissions allow the access. 697.Pp 698The process's effective user ID does not match the user ID of the 699owner of the file, and either the process's effective 700group ID matches the group ID 701of the file, or the group ID of the file is in 702the process's group access list, 703and the group permissions allow the access. 704.Pp 705Neither the effective user ID nor effective group ID 706and group access list of the process 707match the corresponding user ID and group ID of the file, 708but the permissions for ``other users'' allow access. 709.Pp 710Otherwise, permission is denied. 711.It Sockets and Address Families 712A socket is an endpoint for communication between processes. 713Each socket has queues for sending and receiving data. 714.Pp 715Sockets are typed according to their communications properties. 716These properties include whether messages sent and received 717at a socket require the name of the partner, whether communication 718is reliable, the format used in naming message recipients, etc. 719.Pp 720Each instance of the system supports some 721collection of socket types; consult 722.Xr socket 2 723for more information about the types available and 724their properties. 725.Pp 726Each instance of the system supports some number of sets of 727communications protocols. 728Each protocol set supports addresses 729of a certain format. 730An Address Family is the set of addresses 731for a specific group of protocols. 732Each socket has an address 733chosen from the address family in which the socket was created. 734.El 735.Sh SEE ALSO 736.Xr intro 3 , 737.Xr perror 3 738