From owner-freebsd-current@FreeBSD.ORG Wed Aug 6 11:17:53 2003 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E207237B401; Wed, 6 Aug 2003 11:17:53 -0700 (PDT) Received: from rwcrmhc13.comcast.net (rwcrmhc13.comcast.net [204.127.198.39]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2AB9F43FB1; Wed, 6 Aug 2003 11:17:53 -0700 (PDT) (envelope-from julian@elischer.org) Received: from interjet.elischer.org ([12.233.125.100]) by attbi.com (rwcrmhc13) with ESMTP id <20030806181752015009d305e>; Wed, 6 Aug 2003 18:17:52 +0000 Received: from localhost (localhost.elischer.org [127.0.0.1]) by InterJet.elischer.org (8.9.1a/8.9.1) with ESMTP id LAA04713; Wed, 6 Aug 2003 11:17:49 -0700 (PDT) Date: Wed, 6 Aug 2003 11:17:48 -0700 (PDT) From: Julian Elischer To: "Daniel C. Sobral" In-Reply-To: <3F314145.1010908@tcoip.com.br> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: Robert Watson cc: current@freebsd.org Subject: Re: Change in application of default ACLs in UFS X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Aug 2003 18:17:54 -0000 On Wed, 6 Aug 2003, Daniel C. Sobral wrote: > Robert Watson wrote: > > > > Note: this change contains a semantic bugfix for new file creation: > > we now intersect the ACL-generated mode and the cmode requested by > > the user process. This means permissions on newly created file > > objects will now be more conservative. In the future, we may want > > to provide alternative semantics (similar to Solaris and Linux) in > > which the ACL mask overrides the umask, permitting ACLs to broaden > > the rights beyond the requested umask. > > FWIW, I don't like it. This means I'll have to change my umask to o+rw > for my ACLs to work correctly, since I use ACLs to _give_ rights in ways > that umask cannot. > It sounds to me as if additive rights or subtractive rights should be a mount option..