FYI:


the implementation of ACL's i am most familiar with is that what was
present in OS/x 5.x.  basically, ACL's here were a list of
(user,group,access) tuples.  you could grant access based on being
any particular user, or being a member of any particular group.  it
was very flexible.  back then, i mostly used is so i could use
"mesg n" but allow a very small list of people access to my tty so
they could talk(1) or write(1) to me.


i would hope that netbsd would have at least this much flexibility
in the definition of an ACL.


.mrg.