lkml.org 
[lkml]   [2000]   [Aug]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: NFSv4 ACLs (was: ...ACL's and reiser...)
    You can implement the code such that true inheritance occurs without requiring complete scanning up
    to the root, and we will for reiserfs.

    Hans

    "Theodore Y. Ts'o" wrote:
    >
    > "Albert D. Cahalan" <acahalan@cs.uml.edu>:
    > > Michael Gerdts writes:
    > >
    > > > When implementing ACL's please read over section 5.9 of the NFSv4 draft.
    > > > http://www.ietf.org/internet-drafts/draft-ietf-nfsv4-07.txt
    > > >
    > > > By designing ACL's (and other things) to work well with NFSv4 from the
    > > > start, reiserfs will likely have a leg up on the competition inside and
    > > > outside of the Linux arena for being able to support NFSv4.
    > >
    > > Wow, that is almost pure NT 4.0, with 4 of 7 authors being from Sun!
    > > The only difference is that the 17 access mask bits are all specific;
    > > there is no concept of mapping generic bits to object-specific bits.
    > > The inheritance, types, and scanning algorithm are all from NT.
    >
    > No, it's not pure NT, for which we can be very thankful. In particular,
    > it's not the case that you have to scan up the entire directory
    > hierarchy looking to see which ACL's might apply to a particular file.
    > Access control entries only apply apply to the current directory or
    > file, and while certain ACE's can be marked as be "inheritable" in a
    > directory, it only applies to newly created files, not all files
    > underneath that directory.
    >
    > (In NT, if "bob" is given access to /usr, the he has access to /usr/lib,
    > /usr/local, /usr/bin, /usr/etc, /usr/home/tytso/Mail, etc. You have to
    > scan all of the ACL's up to the root whenever you make an access
    > decision. This is slow and painful, and doesn't have much semantic
    > meaning in the presence of hard links --- which NT doesn't have.)
    >
    > - Ted
    >
    > -
    > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    > the body of a message to majordomo@vger.rutgers.edu
    > Please read the FAQ at http://www.tux.org/lkml/

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.rutgers.edu
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:58    [W:0.028 / U:30.504 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site