On Thu, Mar 08, 2001 at 10:20:35AM -0800, Bill Studenmund wrote:

 > ACL support needs to be where access decisions are made for the file
 > system. For FFS (and for all of the other in-kernel file systems), those
 > decisions are made in the kernel, thus ACL support needs to be in the
 > kernel.

Oh, FWIW, David McNab <mcnab@zembu.com> (formerly mcnab@nas.nasa.gov)
did a proof-of-concept implementation of ACLs using portalfs ... It
had the caveat that you had to access the file via the portalfs to
get the ACL functionality, but it was still pretty cool.  I think he
even had Kerberos 5-based authentication of the accessing-user working
for it, as well.

-- 
        -- Jason R. Thorpe <thorpej@zembu.com>