RE: [RFC v3 42/45] nfs: Add richacl support

From	"Frank Filz" <ffilzlnx@mindspring.com>
Newsgroups	linux.kernel
Subject	RE: [RFC v3 42/45] nfs: Add richacl support
Date	2016-06-23 19:40 +0200
Message-ID	<rNgLE-4Qw-29@gated-at.bofh.it> (permalink)
References	<piJEC-5up-5@gated-at.bofh.it> <piJEC-5up-5@gated-at.bofh.it> <piJEC-5up-15@gated-at.bofh.it> <rNfPz-4cB-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

> First, let me say thanks for all the work! We (Primary Data) have been using
> samba with the vfs_richacl module reexporting an nfsv4.2 mount and things
> are working pretty well. You can count on us for testing, bug fixing and code
> review.
> 
> Now for my question: It looks like this call to richacl_apply_masks in the client
> xattr_set path exists so that the knfsd permission check algorithm works
> correctly.
> This makes some pretty big assumptions about the server’s implementation.
> There are other servers out there besides knfsd!
> 
> I think this will have to be fixed before this patch can be accepted. I’m willing
> to help, but I’m wondering where this should be fixed:
> 
> Do we call richacl_apply_masks on the server before setting the xattr so the
> normalized acl is saved, or should we save the ACL as-is and call
> richacl_apply_masks before it’s used?

I definitely want to hear more about this. At some point we will utilize RichACLs in Ganesha.

Frank


---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Re: [RFC v3 42/45] nfs: Add richacl support Weston Andros Adamson <dros@monkey.org> - 2016-06-23 18:40 +0200
  RE: [RFC v3 42/45] nfs: Add richacl support "Frank Filz" <ffilzlnx@mindspring.com> - 2016-06-23 19:40 +0200

csiph-web