Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 6 Dec 2001 14:02:35 +0000 (GMT)
From:      Jan Grant <Jan.Grant@bristol.ac.uk>
To:        Cliff Sarginson <cliff@raggedclown.net>
Cc:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   ACLs Was: Modifying only certain bits with chmod
Message-ID:  <Pine.GSO.4.31.0112061358420.323-100000@mail.ilrt.bris.ac.uk>
In-Reply-To: <20011206132237.GB9605@raggedclown.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 6 Dec 2001, Cliff Sarginson wrote:

> I was reading about the impending arrival of ACL's in FreeBSD 5
> yesterday...talk about confusing the children. And it seems, if I
> am correct, that it has no impact on the execution of programs, which
> is where it would be *really* useful in de-terrorising the use of
> root..but that is another topic all together.
> Or perhaps I am missing the point.

ACLs _are_ pretty useful; they're only (in the POSIX world) file-system
things, indeed - TrustedBSD has other goodies to offer too. But their
usefulness really depends on what you want to use the system for. More
flexible file-system privs for a file-server is the obvious use; it'll
be nice * when that bit of samba works out of the box.

Someone had a query recently regarding suExec and apache CGI serving
that sounded like an ideal use for extended ACLs.

jan

* ie, convenient in the extreme

-- 
jan grant, ILRT, University of Bristol. http://www.ilrt.bris.ac.uk/
Tel +44(0)117 9287088 Fax +44 (0)117 9287112 RFC822 jan.grant@bris.ac.uk
(Things I've found in my attic, #2: A hundredweight of pornography.)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.4.31.0112061358420.323-100000>