Odd ACL question

Dan Nelson dnelson at allantgroup.com
Mon Feb 9 08:43:09 PST 2004


In the last episode (Feb 09), Harti Brandt said:
> On Sun, 8 Feb 2004, Tim Kientzle wrote:
> TK>On Sat, 7 Feb 2004, Tim Kientzle wrote:
> TK>>Joerg Schilling's "star" archives ACLs as follows:
> TK>>
> TK>>"user::rwx,group::r--,group:mail:rw-:6,mask::rw-,other::r--"
> TK>>
> TK>>Note the "group:mail:rw-:6" entry that contains a fourth
> TK>>field with the uid/gid number. ...
> TK>
> TK>   * If the username exists and the UID conflicts with the local
> TK>       system, ???
> TK>
> TK>This last case is the tough one.  My temptation:  map it to
> TK>an unused UID, issue a warning about the remap, and keep going.
> 
> That may cause the problem I described. This may leave a file in a
> user directory that the user cannot delete without intervention of
> the root user, but its probably the simplest solution. What about
> non-existing groups?

Any file that a user creates, that user can delete.  If you're talking
about a root user extracting something into a user's directory, that's
different, but you have the same problem even without ACLs.

-- 
	Dan Nelson
	dnelson at allantgroup.com


More information about the freebsd-hackers mailing list