>> Okay, so how do we then handle modification of the ACL?  VOP_ACCESS()
>> only handles the access on the file; it does not do manipulation of
>> the access controls.
>
>Doh, yes, there is that. :-) While I think one VOP could do it, I'd say
>let's look at what other OSs are doing (especially NFS) and do something
>not too far off of that.

Well, coda uses IOCTL for ACL changing and setting.  Also, coda allows
ACLs on directories only, not on normal files. 

 
-- 
Phil Nelson
e-mail: philnelson@home.com  (Work: phil@cs.wwu.edu)
web: members.home.com/philnelson