From owner-freebsd-hackers Thu Oct 23 10:56:19 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id KAA14533 for hackers-outgoing; Thu, 23 Oct 1997 10:56:19 -0700 (PDT) (envelope-from owner-freebsd-hackers) Received: from smtp02.primenet.com (smtp02.primenet.com [206.165.5.83]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id KAA14523 for ; Thu, 23 Oct 1997 10:56:15 -0700 (PDT) (envelope-from tlambert@usr02.primenet.com) Received: (from daemon@localhost) by smtp02.primenet.com (8.8.7/8.8.7) id KAA03717; Thu, 23 Oct 1997 10:56:08 -0700 (MST) Received: from usr02.primenet.com(206.165.6.202) via SMTP by smtp02.primenet.com, id smtpd003690; Thu Oct 23 10:55:58 1997 Received: (from tlambert@localhost) by usr02.primenet.com (8.8.5/8.8.5) id KAA27624; Thu, 23 Oct 1997 10:55:57 -0700 (MST) From: Terry Lambert Message-Id: <199710231755.KAA27624@usr02.primenet.com> Subject: Re: ACLs [Was: C2 Trusted FreeBSD?] To: joerg_wunsch@uriah.heep.sax.de Date: Thu, 23 Oct 1997 17:55:57 +0000 (GMT) Cc: hackers@FreeBSD.ORG In-Reply-To: <19971023092847.TP39265@uriah.heep.sax.de> from "J Wunsch" at Oct 23, 97 09:28:47 am X-Mailer: ELM [version 2.4 PL23] Content-Type: text Sender: owner-freebsd-hackers@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk > > Yes, but how do you back them up, or, worse yet, restore them? How do > > you copy your HTML directory tree to another drive you're bringing > > on-line and preserve all the ACL settings? As noted before, *none* > > of the system tools support the ACLs. > > I think you could make compatible changes to dump and restore to > support ACLs. Perhaps, drop a second record containing the ACLs right > behind an inode record (or even before, so the restore program knows > about the intended ACLs before actually even seeing the inode > information). The unknown records should simply be ignored by a > restore that doesn't understand them. If it's a stacking layer that uses a name space excape and uses a real file in the underlying FS for the ACL's, then the answer is simple: back up the underlying FS instead of the top layer of the stack. Terry Lambert terry@lambert.org --- Any opinions in this posting are my own and not those of my present or previous employers.