[lkml]   [2010]   [Jul]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    Subject[PATCH -V3 00/17] New ACL format for better NFSv4 acl

    The following set of patches implements a new acl model for linux. Rich ACLs
    are an implementation of NFSv4 ACLs, extended by file masks to fit into the
    standard POSIX file permission model. They are designed to work seamlessly
    locally as well as across the NFSv4 and CIFS/SMB2 network file system protocols.

    The patch set consists of three parts:

    The first set of patches, posted as a follow up, contains the Rich ACL model
    and Ext4 implementation. The second set [1] contains mapping of Rich ACL to
    NFSv4 ACL (how to apply file mask to access mask) and implementation of
    Richacl ACL for NFS server and client. The third set [2] contains POSIX ACL
    to Rich ACL mapping and its ext4 usage.

    [1] git:// richacl-upstream
    [2] git:// richacl-fullset

    A user-space utility for displaying and changing richacls is available at [3]
    (a number of examples can be found at

    [3] git:// master

    To test richacl on ext4 use -o richacl mount option. This mount option may later be
    dropped in favour of a feature flag.

    More details regarding richacl can be found at

    Changes from V2:
    1) Git repo include check-acl branch that drop newly added inode_operations
    callback in favour for additional access check flags (MAY_CREATE_FILE,
    2) richacl is now cached in the vfs inode instead of file system inode.
    (currently kept as a separate patch. We may want to fold that later)
    3) Added a new acl flag ACL4_MASKED. richacl_apply_masks() can skip transforming acls
    without this flag, which speeds things up and avoids modifying those acls unnecessarily.
    4) Owner always allowed permissions are now explicitly included when synthesizing an acl
    from file mode.

    Changes from V1:
    1) Split the patches into smaller patches
    2) Added extensive documentation to the patches.


     \ /
      Last update: 2010-07-29 20:01    [W:0.019 / U:16.696 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site