--- /dev/null
+#!/bin/bash
+
+SHAREDROOT=`../bin/domtool-config -path shared-root`
+DOMTOOLROOT="$1"
+
+if [ -z "$SHAREDROOT" ]; then
+ echo "shared-root not set, domtool not built?"
+ exit 1
+fi
+
+if [ -z "$DOMTOOLROOT" ]; then
+ echo "Usage: $0 USER"
+ exit 1
+fi
+
+if [ -f $SHAREDROOT/acl ]; then
+ echo "acl file already exists. Refusing to overwrite"
+ exit 1
+fi
+
+cat > $SHAREDROOT/acl <<EOF
+$USER
+priv all
+
+EOF