Re: [PATCH v18 00/22] Richacls (Core and Ext4)

From	Volker Lendecke <Volker.Lendecke@SerNet.DE>
Newsgroups	linux.kernel
Subject	Re: [PATCH v18 00/22] Richacls (Core and Ext4)
Date	2016-03-15 21:40 +0100
Message-ID	<rd3V0-7gd-13@gated-at.bofh.it> (permalink)
References	<r7rdD-tJ-3@gated-at.bofh.it> <rbvVo-7ms-9@gated-at.bofh.it> <rbxXc-mR-5@gated-at.bofh.it> <rcRqO-7hA-19@gated-at.bofh.it> <rcZom-3Yy-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Tue, Mar 15, 2016 at 08:45:14AM -0700, Jeremy Allison wrote:
> On Tue, Mar 15, 2016 at 12:11:03AM -0700, Christoph Hellwig wrote:
> > People have long learned that we only have 'alloc' permissions.  Any
> > model that mixes allow and deny ACE is a mistake.
> 
> People can also learn and change though :-). One of the
> biggest complaints people deploying Samba on Linux have is the
> incompatible ACL models.

Just to confirm: I see this a lot in the field. NFSv4 ACLs, while not a
perfect match for NTFS ACLs are a lot closer much more usable to people
who want to serve Windows clients.

Also in the pure linux world there is a lot that you can not express
with just rwx, sgid, sticky bits and friends. If you want the additional
functionality of the richacl bits, I would call it a big mistake to
omit negative aces, if just for the reason not to create yet another
ACLs flavor.

> Whilst I have sympathy with your intense dislike of the
> Windows ACL model, this comes down to the core of "who
> do we serve ?"

The world has enough confusion around ACL semanics, please do not add
more to it by creating your own model of the day.

Volker

Thread

Re: [PATCH v18 00/22] Richacls (Core and Ext4) Christoph Hellwig <hch@infradead.org> - 2016-03-11 15:10 +0100
  Re: [PATCH v18 00/22] Richacls (Core and Ext4) Andreas Gruenbacher <agruenba@redhat.com> - 2016-03-11 17:20 +0100
    Re: [PATCH v18 00/22] Richacls (Core and Ext4) Steve French <smfrench@gmail.com> - 2016-03-11 21:10 +0100
      Re: [PATCH v18 00/22] Richacls (Core and Ext4) Jeremy Allison <jra@samba.org> - 2016-03-12 00:10 +0100
        Re: [PATCH v18 00/22] Richacls (Core and Ext4) Andreas Gruenbacher <agruenba@redhat.com> - 2016-03-14 00:10 +0100
          Re: [PATCH v18 00/22] Richacls (Core and Ext4) Jeremy Allison <jra@samba.org> - 2016-03-14 05:00 +0100
      Re: [PATCH v18 00/22] Richacls (Core and Ext4) Christoph Hellwig <hch@infradead.org> - 2016-03-15 08:20 +0100
        Re: [PATCH v18 00/22] Richacls (Core and Ext4) Steve French <smfrench@gmail.com> - 2016-03-16 04:50 +0100
    Re: [PATCH v18 00/22] Richacls (Core and Ext4) Christoph Hellwig <hch@infradead.org> - 2016-03-15 08:20 +0100
      Re: [PATCH v18 00/22] Richacls (Core and Ext4) Jeremy Allison <jra@samba.org> - 2016-03-15 16:50 +0100
        Re: [PATCH v18 00/22] Richacls (Core and Ext4) Volker Lendecke <Volker.Lendecke@SerNet.DE> - 2016-03-15 21:40 +0100
          Re: [PATCH v18 00/22] Richacls (Core and Ext4) Steve French <smfrench@gmail.com> - 2016-03-16 04:30 +0100

csiph-web