From owner-freebsd-current Tue Nov 26 14:20:41 2002 Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1F35037B401 for ; Tue, 26 Nov 2002 14:20:40 -0800 (PST) Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8799743EC2 for ; Tue, 26 Nov 2002 14:20:39 -0800 (PST) (envelope-from robert@fledge.watson.org) Received: from fledge.watson.org (fledge.pr.watson.org [192.0.2.3]) by fledge.watson.org (8.12.6/8.12.5) with SMTP id gAQMKRBF007665; Tue, 26 Nov 2002 17:20:28 -0500 (EST) (envelope-from robert@fledge.watson.org) Date: Tue, 26 Nov 2002 17:20:27 -0500 (EST) From: Robert Watson X-Sender: robert@fledge.watson.org To: bsdc@xtremedev.com Cc: Hiten Pandya , current@FreeBSD.ORG Subject: Re: ACLs on the boot partition? In-Reply-To: <20021126125808.B10067-100000@Amber.XtremeDev.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Tue, 26 Nov 2002 bsdc@xtremedev.com wrote: > On Tue, 26 Nov 2002, Hiten Pandya wrote: > > > On Tue, Nov 26, 2002 at 11:21:28AM -0700, bsdc@xtremedev.com wrote the words in effect of: > > > On Tue, 26 Nov 2002, Bruno Miguel wrote: > > > > > > > On 25 Nov 2002 at 23:34, bsdc@xtremedev.com wrote... > > > > > > > > > How do I enable ACLs on the boot partition? tunefs -a enable /dev/ad0s1a > > > > > indicates it got set (in single user mode with / mounted readonly). But I > > > > > still can't set anything with setfacl(1). I tried booting to the fixit > > > > > floppy, hoping to set acls flag from there to my partition, but it doesn't > > > > > have tunefs. Is my only choice now to take the drive out and put it in > > > > > another FreeBSD machine and set it from there? > > > > > > > > If you are using UFS1, did you follow the procedures in /sys/ufs/ufs/README.acls ? > > > > > > No, not using USF1. / was formatted UFS2. > > > > tunefs -a /your/filesystem > > > > I think thats the one. > > Cheers. > > Tried that already on / in single user mode with it mounted readonly. > tunefs said it changed the flag, but didn't really. I also tried adding > acls to fstab for /, but no effect. Were you successful in doing this > for / ? tunefs changes the flag for the next mount, so doesn't take immediate effect. Once you've tunefs'd a read-only file system, you need to unmount and remount it -- for the file system root, this generally means rebooting. Just to confirm: you're running with GENERIC, or with a kernel that includes UFS_ACL, right? (Normally the kernel will complain if you try to mount a file system with ACL support when ACLs aren't enabled). Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert@fledge.watson.org Network Associates Laboratories To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message