- <listitem><para>Set POSIX ACLs (access control lists).
- Lines of this type accept shell-style globs in
- place of normal path names. This can be useful for
- allowing additional access to certain files.
- </para></listitem>
+ <term><varname>a+</varname></term>
+ <listitem><para>Set POSIX ACLs (access control lists). If
+ suffixed with <varname>+</varname>, specified mask will be
+ added to existing
+ entries. <command>systemd-tmpfiles</command> does not
+ automatically add the required base entries for user and
+ group to the specified mask, so they must be specified
+ explicitly if <varname>+</varname> is not used. The
+ mask will be added if not specified explicitly.
+ Lines of this type accept shell-style globs in place
+ of normal path names. This can be useful for allowing
+ additional access to certain files. </para></listitem>