Setze das SetGID-Sticky-Bit:
chmod g+s <directory>
Dann:
Gives group read,write,exec permissions for currently existing files and folders, recursively:
setfacl -R -m g::rwx /home/limited.users/<directory>
Revokes read and write permission for everyone else in existing folder and subfolders:
setfacl -R -m o::x /home/limited.users/<directory>
Gives group rwx permissions by default, recursively:
setfacl -R -d -m g::rwx /home/limited.users/<directory>
Revokes read, write and execute permissions for everyone else:
setfacl -R -d -m o::--- /home/limited.users/<directory>
Entfernen der gesamten ACL, so dass nur die klassischen Unixrechte zurückbleiben:
setfacl -b DATEI ...