Date: Wed, 6 Aug 2003 14:20:40 -0400 (EDT) From: Robert Watson <rwatson@freebsd.org> To: "Daniel C. Sobral" <dcs@tcoip.com.br> Cc: current@freebsd.org Subject: Re: Change in application of default ACLs in UFS Message-ID: <Pine.NEB.3.96L.1030806141854.29055A-100000@fledge.watson.org> In-Reply-To: <3F314145.1010908@tcoip.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 6 Aug 2003, Daniel C. Sobral wrote: > > Note: this change contains a semantic bugfix for new file creation: > > we now intersect the ACL-generated mode and the cmode requested by > > the user process. This means permissions on newly created file > > objects will now be more conservative. In the future, we may want > > to provide alternative semantics (similar to Solaris and Linux) in > > which the ACL mask overrides the umask, permitting ACLs to broaden > > the rights beyond the requested umask. > > FWIW, I don't like it. This means I'll have to change my umask to o+rw > for my ACLs to work correctly, since I use ACLs to _give_ rights in ways > that umask cannot. I'm in the throes of implementing changes that push umask processing down into individual file systems, permitting UFS ACLs to override the umask using the ACL mask, which would reproduce the Solaris/Linux model (non-POSIX.1e). However, there are some interesting implementation question shtere, so it will probably be a bit (perhaps a couple of weeks) before I have a useful prototype worth reviewing. I agree that those semantics are useful, however :-). Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert@fledge.watson.org Network Associates Laboratories
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96L.1030806141854.29055A-100000>