code:

if z=`fsaclctl -p / 2>/dev/null`; then if grep -qs disabled <<< $z; \
then echo not enabled; else echo okay; fi; else echo not possible; fi

okay

code:

$ homeACLtool
Usage: /Users/halito/bin/homeACLtool  -l | -c | -f | -R | -E | -D

 -l   list only those items in our home which come with ACLs by default.
 -c   check default items and list any whose ACL deviates from the norm.

 -f   find and list any *non*-default item with ACLs in our home folder.
 -R   find and Remove all ACLs in our home found on *non*-default items.

 -E   Erase **every** ACL entry within our entire home folder hierarchy.
 -D   set Default ACLs in our home on the Default items (ignore others).

N.B: This script manages ACLs only, not ownerships/permissions or flags.

code:

#!/bin/bash -
#homeACLtool: script to manage default ACLs inside the user's home (Mac OSX)
#(c)EF/-HI-2008.FEB.05
PATH=/bin:/usr/bin:/usr/sbin
export PATH
IFS=$'\n' #facilitates for-loops
blockKybd () { stty -echo igncr; }
allowKybd () { stty echo -igncr; }
PROGNAME=$(basename "$0")
USERNAME=$(basename ~)
EXITSTAT=0

exitScript ()
{
	trap '' INT QUIT ABRT TERM HUP
	[ -n "$1" ] && (( EXITSTAT+=$1 ))
	if [ $EXITSTAT -ne 0 ]; then s=
	   [ $EXITSTAT -ne 1 ] && s=s
	   echo -e "\e[37;41m $EXITSTAT error$s occurred \e[0m\a" >&2
	   [ $EXITSTAT -gt 125 ] && EXITSTAT=125
	fi
	exit $EXITSTAT
}

trap 'echo -ne "\e[0m"; allowKybd' EXIT
trap 'echo "$PROGNAME: ignoring HUP" >&2' HUP
trap 'echo "$PROGNAME: stopping on signal" >&2; exitScript' INT QUIT ABRT TERM

blockKybd

accumulateStatus () { (( EXITSTAT+=$? )); }
noErrorsHappened () { [ $EXITSTAT -eq 0 ]; }

# get ls to display flags in both Leopard and Tiger:
o=o; if [ "$(/bin/ls -od . )" != '.' ]; then o=O; fi

myLS=/bin/ls\ -leG${o}d

# :|:-----------------------------------:|:
# :|:---------=< homeACLtool >=---------:|:
# :V:-----------------------------------:V:

if [[ $1 ]] && [[ $1 != -l ]]; then
   if [ -r /usr/sbin/fsaclctl ] && z=`fsaclctl -p / 2>/dev/null`; then
      if grep -iqs disabled <<< $z; then
         echo -n 'Need to enable ACLs with ' >&2
         echo -e '\e[1msudo fsaclctl -p / -e\e[0m' >&2
         echo 'and restart, before this script becomes useful.' >&2
         exitScript 1 #ACLs disabled
      fi
   else
      echo 'cannot find fsaclctl' >&2
      exitScript 1 #ACLs impossible
   fi
fi

DropBoxACL=user:$USERNAME\ allow\ list,add_file,search,\
delete,add_subdirectory,delete_child,readattr,writeattr,\
readextattr,writeextattr,readsecurity,writesecurity,chown,\
file_inherit,directory_inherit

DropBoxDir=~/Public/Drop\ Box

DefaultACL=group:everyone\ deny\ delete

ACLfolders='~
	~/Desktop
	~/Documents
	~/Downloads
	~/Movies
	~/Music
	~/Pictures
	~/Public
	~/Sites
	~/Library
	~/Library/Application Support
	~/Library/Assistants
	~/Library/Audio/MIDI Drivers
	~/Library/Audio/Plug-Ins/Components
	~/Library/Audio/Plug-Ins/Digidesign
	~/Library/Audio/Plug-Ins/VST
	~/Library/Audio/Plug-Ins
	~/Library/Audio/Sounds/Alerts
	~/Library/Audio/Sounds/Banks
	~/Library/Audio/Sounds
	~/Library/Audio
	~/Library/ColorPickers
	~/Library/Compositions
	~/Library/Favorites
	~/Library/FontCollections
	~/Library/Fonts
	~/Library/iMovie/Plug-ins
	~/Library/iMovie/Sound Effects
	~/Library/iMovie
	~/Library/Input Methods
	~/Library/Internet Plug-Ins
	~/Library/Keyboard Layouts
	~/Library/Preferences
	~/Library/Printers
	~/Library/Screen Savers
	~/Library/Sounds
	~/Library/Voices
'
#	~/Applications
#	~/bin
#
# ^to customize, add more items above^

itemList () { sed 's: :\\\ :g' <<< "$ACLfolders"; }

doNONstandardACLs ()
{
	fullList=; s=; c=0; echo -ne ' looking for extra ACLs...\r' >&2
	fullList=`find -x ~ -not -type l -print0 | xargs -0 ls -ledT |
	   grep -B 1 -E '^ [01]: ' | sed '/:[0-9][0-9]/!d;
	      s:^.*\:[0-9][0-9] [0-9]\{4\} ::'`
	accumulateStatus
	echo -ne ' processing results...    \r' >&2
	if [[ $fullList ]]; then
	   for i in $fullList
	      do
	         for x in `itemList`
	            do
	               if [ $i = `eval echo $x` ]; then
	                  continue 2
	               fi
	            done
	         if [[ $i != $DropBoxDir ]]; then (( c+=1 ))
	            case $1 in
	               locate) printf '\e[7mACL extra:\e[0m                 \n'
	                       eval $myLS \"$i\"
	                       accumulateStatus
	                       ;;
	               change) chmod -N $i
	                       accumulateStatus
	                       printf '\e[7mACL removed:\e[0m               \n'
	                       eval $myLS \"$i\"
	                       accumulateStatus
	                       ;;
	            esac
	         fi
	      done
	   if [ $c -ne 0 ]; then [ $c -ne 1 ] && s=s
	      printf '\e[1;4m%sd %s additional item%s with ' "$1" "$c" "$s"
	      printf 'ACLs not defined in standard Mac OSX\e[0m\n'
	   elif noErrorsHappened; then
	      printf 'no ACLs found on any *non*-default items\n'
	   fi
	else
	   printf '\e[37;41m NOTICE: no ACLs were found in %s at all \e[0m\n' ~
	fi
}

s=; c=0
case $1 in
  -l) # list the default folders:
	eval $myLS `itemList`
	accumulateStatus
	eval $myLS \"$DropBoxDir\"
	accumulateStatus
	;;

  -c) # check default folders for proper ACLs:
	for x in `itemList`
	   do
	      y=`eval ls -lde $x | sed 1d`
	      accumulateStatus
	      if [ "$y" != " 0: $DefaultACL" ]; then (( c+=1 ))
	         printf '\e[7mACL error:\e[0m\n'
	         eval $myLS $x
	         accumulateStatus
	      fi
	   done
	y=`ls -lde $DropBoxDir | sed 1d`
	accumulateStatus
	if [ "$y" != " 0: $DropBoxACL" ]; then (( c+=1 ))
	   printf '\e[7mACL error:\e[0m\n'
	   eval $myLS \"$DropBoxDir\"
	   accumulateStatus
	fi
	if [ $c -ne 0 ]; then [ $c -ne 1 ] && s=s
	   printf '\e[1;4mspotted %s default item%s with entries' "$c" "$s"
	   printf ' different from standard Mac OSX\e[0m\n'
	elif noErrorsHappened; then
	   printf 'all ACLs on default items appear correct\n'
	fi
	;;

  -f) # list *non*-default items with ACLs:
	doNONstandardACLs 'locate'
	accumulateStatus
	;;

  -R) # remove ACLs from *non*default items:
	allowKybd
	echo -ne "> Allow $PROGNAME to remove ACLs from *non*-default items in " >&2
	echo -ne ~ '\b? (y/n [n]): \a' >&2
	read -t66; if [ "$REPLY" != y ]; then echo '^Canceled' >&2; exitScript; fi
	blockKybd
	doNONstandardACLs 'change'
	accumulateStatus
	;;

  -E) # erase all ACLs:
	allowKybd
	echo -ne 'Erasing ACLs will clear out \e[1mevery\e[0m ACL entry from ' >&2
	echo -ne "items in your home.\n> Allow $PROGNAME to erase all ACLs from " >&2
	echo -ne ~ '\b? (y/n [n]): \a' >&2
	read -t66; if [ "$REPLY" != y ]; then echo '^Canceled' >&2; exitScript; fi
	blockKybd
	chmod -R -N ~
	accumulateStatus
	if noErrorsHappened; then
	    printf '%s: every ACL erased from items in %s\n' "$PROGNAME" ~
	fi
	;;

  -D) # set default ACLs:
	allowKybd
	echo -ne "> Allow $PROGNAME to apply default ACLs on default items in " >&2
	echo -ne ~ '\b? (y/n [n]): ' >&2
	read -t66; if [ "$REPLY" != y ]; then echo '^Canceled' >&2; exitScript; fi
	blockKybd
	eval chmod -N `itemList`
	accumulateStatus
	chmod -N "$DropBoxDir"
	accumulateStatus
	eval chmod +a \""$DefaultACL"\" `itemList`
	accumulateStatus
	chmod +a "$DropBoxACL" "$DropBoxDir"
	accumulateStatus
	if noErrorsHappened; then
	   printf '%s: default ACLs restored to ' "$PROGNAME"
	   printf 'existing unlocked default items in %s\n' ~
	fi
	;;

   *)	cat <<-helpdoc >&2
	Usage: $0  -l | -c | -f | -R | -E | -D

	 -l   list only those items in our home which come with ACLs by default.
	 -c   check default items and list any whose ACL deviates from the norm.

	 -f   find and list any *non*-default item with ACLs in our home folder.
	 -R   find and Remove all ACLs in our home found on *non*-default items.

	 -E   Erase **every** ACL entry within our entire home folder hierarchy.
	 -D   set Default ACLs in our home on the Default items (ignore others).

	N.B: This script manages ACLs only, not ownerships/permissions or flags.
	helpdoc
	;;
esac
exitScript