Subject: Re: fs acl's
To: None <dustin@spy.net>
From: Brett Lymn <blymn@baea.com.au>
List: current-users
Date: 01/28/1998 21:26:28
According to Dustin Sallings:
>
>> I hesitate to think what happens with ACLs and NFS!
The last time I looked on Solaris it just did not happen....
>
> *sigh* The more I think about it, the less useful it seems, really. If
>I add myself to one more group, my SunOS machine gets very mad at me.
Hmmm you should be able to work around that with group sticky bits on
the directories.
> My CVS
>repository is on a NetBSD machine, and there are a couple of people who share
>it with me. I guess I could gain just as much by moving it to a Solaris
>machine for the things I need. It just seemed like a neat idea.
>
If it is going to be done then please make them the POSIX semantics.
The Sun Solaris ACL's are overridden by the umask whereas posix says
they should not be - we have been bitten by this at work. Suns
response, bless them, was to say they would try to have the posix spec
changed to match their implementation :-( Note that this was with
2.5, I am not sure about 2.6
IMHO ACL's can be a handy thing to have, they give you the ability to
control access in a much more finely grained manner than you can with
the current unix permissions. There are hard limits on the number of
groups that a user can be in which can be inconvenient in a complex
environment - ACL's can address this.
--
Brett Lymn, Computer Systems Administrator, British Aerospace Australia
===============================================================================
+++ Divide By Cucumber Error. Please Reinstall Universe And Reboot +++
- Hogfather, Terry Pratchett.