Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 6 Aug 2003 14:20:40 -0400 (EDT)
From:      Robert Watson <rwatson@freebsd.org>
To:        "Daniel C. Sobral" <dcs@tcoip.com.br>
Cc:        current@freebsd.org
Subject:   Re: Change in application of default ACLs in UFS
Message-ID:  <Pine.NEB.3.96L.1030806141854.29055A-100000@fledge.watson.org>
In-Reply-To: <3F314145.1010908@tcoip.com.br>

next in thread | previous in thread | raw e-mail | index | archive | help

On Wed, 6 Aug 2003, Daniel C. Sobral wrote:

> >   Note: this change contains a semantic bugfix for new file creation:
> >   we now intersect the ACL-generated mode and the cmode requested by
> >   the user process.  This means permissions on newly created file
> >   objects will now be more conservative.  In the future, we may want
> >   to provide alternative semantics (similar to Solaris and Linux) in
> >   which the ACL mask overrides the umask, permitting ACLs to broaden
> >   the rights beyond the requested umask.
> 
> FWIW, I don't like it. This means I'll have to change my umask to o+rw
> for my ACLs to work correctly, since I use ACLs to _give_ rights in ways
> that umask cannot. 

I'm in the throes of implementing changes that push umask processing down
into individual file systems, permitting UFS ACLs to override the umask
using the ACL mask, which would reproduce the Solaris/Linux model
(non-POSIX.1e).  However, there are some interesting implementation
question shtere, so it will probably be a bit (perhaps a couple of weeks)
before I have a useful prototype worth reviewing.  I agree that those
semantics are useful, however :-).

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert@fledge.watson.org      Network Associates Laboratories



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96L.1030806141854.29055A-100000>