Re: ACLs in Linux

This is a discussion on Re: ACLs in Linux within the Linux Security forums, part of the System Security and Security Related category; On Tue, 08 Jul 2003 17:27:56 GMT, Todd Beauchemin <Marauder328@hotmail.com> wrote: > I was ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 07-09-2003
Skylar Thompson
 
Posts: n/a
Default Re: ACLs in Linux

On Tue, 08 Jul 2003 17:27:56 GMT, Todd Beauchemin <Marauder328@hotmail.com> wrote:
> I was searching around the web for implementations of ACLs
> in Linux and found a few different ones. I was wondering
> what peoples thoughts were on this idea and whether it
> was worth implementing (Ill only be doing it for hobbyist
> reasons and educational value -- so I have no specific
> implementation). And if there was any value to learning
> how to implement this which distribution do people use
> or have had success with.


I've had good experience with the ACLs in SGI's XFS filesystem. They are
fully POSIX-compliant, and journaled too. Ext3 recently got ACL support as
well, but I believe it's in the form of a kernel patch. XFS has had ACLs
from the beginning, and they are likely to be safer for production
use.

--
-- Skylar Thompson (skylar@os2.dhs.org)
-- http://os2.dhs.org/~skylar/
Reply With Quote
  #2 (permalink)  
Old 07-09-2003
Casper H.S. Dik
 
Posts: n/a
Default Re: ACLs in Linux

Skylar Thompson <skylar@amayatra.os2.dhs.org> writes:

>I've had good experience with the ACLs in SGI's XFS filesystem. They are
>fully POSIX-compliant, and journaled too. Ext3 recently got ACL support as
>well, but I believe it's in the form of a kernel patch. XFS has had ACLs
>from the beginning, and they are likely to be safer for production
>use.


There's no such thing as "fully POSIX-compliant ACLs".

Casper
--
Expressed in this posting are my opinions. They are in no way related
to opinions held by my employer, Sun Microsystems.
Statements on Sun products included here are not gospel and may
be fiction rather than truth.
Reply With Quote
  #3 (permalink)  
Old 07-09-2003
Skylar Thompson
 
Posts: n/a
Default Re: ACLs in Linux

On 09 Jul 2003 09:02:34 GMT, Casper H.S Dik <Casper.Dik@Sun.COM> wrote:
> Skylar Thompson <skylar@amayatra.os2.dhs.org> writes:
>
>>I've had good experience with the ACLs in SGI's XFS filesystem. They are
>>fully POSIX-compliant, and journaled too. Ext3 recently got ACL support as
>>well, but I believe it's in the form of a kernel patch. XFS has had ACLs
>>from the beginning, and they are likely to be safer for production
>>use.

>
> There's no such thing as "fully POSIX-compliant ACLs".


Yes there are. XFS supports the standards specified in POSIX 1003.1e.

--
-- Skylar Thompson (skylar@os2.dhs.org)
-- http://os2.dhs.org/~skylar/
Reply With Quote
  #4 (permalink)  
Old 07-09-2003
Dragan Cvetkovic
 
Posts: n/a
Default Re: ACLs in Linux

Skylar Thompson <skylar@amayatra.os2.dhs.org> writes:

> On 09 Jul 2003 09:02:34 GMT, Casper H.S Dik <Casper.Dik@Sun.COM> wrote:
> > Skylar Thompson <skylar@amayatra.os2.dhs.org> writes:
> >
> >>I've had good experience with the ACLs in SGI's XFS filesystem. They are
> >>fully POSIX-compliant, and journaled too. Ext3 recently got ACL support as
> >>well, but I believe it's in the form of a kernel patch. XFS has had ACLs
> >>from the beginning, and they are likely to be safer for production
> >>use.

> >
> > There's no such thing as "fully POSIX-compliant ACLs".

>
> Yes there are. XFS supports the standards specified in POSIX 1003.1e.
>


Well, according to e.g. http://wt.xpilot.org/publications/po.../download.html

Important note: The standards IEEE 1003.1e and IEEE 1003.2c are both drafts
and withdrawn. This means, that both are neither finished nor worked on by
the IEEE any longer.


Bye, Dragan

--
Dragan Cvetkovic,

To be or not to be is true. G. Boole No it isn't. L. E. J. Brouwer
Reply With Quote
  #5 (permalink)  
Old 07-29-2003
Casey Schaufler
 
Posts: n/a
Default Re: ACLs in Linux

"Casper H.S. Dik" wrote:
>
> Skylar Thompson <skylar@amayatra.os2.dhs.org> writes:
>
> >I've had good experience with the ACLs in SGI's XFS filesystem. They are
> >fully POSIX-compliant, and journaled too. Ext3 recently got ACL support as
> >well, but I believe it's in the form of a kernel patch. XFS has had ACLs
> >from the beginning, and they are likely to be safer for production
> >use.

>
> There's no such thing as "fully POSIX-compliant ACLs".
>
> Casper


This is correct. It is a violation of the IEEE (POSIX) rules
to claim conformance to a Draft. The POSIX P1003.1e/2c work
was withdrawn when it got to the point that only SGI and IBM
were willing to support the effort. ACL implementation above
very closely resembles Draft 17 of POSIX ACLs, but does not
claim conformance. That would be wrong.

--

Casey Schaufler Manager, Trust Technology, SGI
casey@sgi.com 650.933.1634
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 06:21 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0