AW: ACLs
The posix acl mentiond are at
http://acl.bestbits.at/mailman/listinfo/acl-devel.
And Samba from testing uses these ACLs for NT ACL. kind of at least, there
are not the same.
I installed the acl on a non-prod system with Dual Processor without
problems.
Perhaps the fileutil package is needed in an ACL aware favour. (ldd on ls,
cp, etc. didnt mention libacl but they work...)
Samba needed a bit tweaking (a patch for German Umlauts, now in the release
i think) and recompile to work with non-ascii chars from windows. But the
Samab source comes with debian/rules support, so no real hassle...
But that were all my needs. No NFS or Quota (new ACL Patches are said to
support those).
ar
-----Ursprüngliche Nachricht-----
Von: sean finney [mailto:seanius@seanius.net]
Gesendet: Donnerstag, 6. Februar 2003 15:06
An: Thomas Ritter
Cc: debian-security@lists.debian.org
Betreff: Re: ACLs
heya thomas,
assuming you mean exclusively filesystem acls, acl support is
there... kind of. for ext2/ext3, there's a kernel-patch package
you can use to build your own kernel quite easily the Debian Way
with make-kpkg.
the trouble is stuff you already hinted at, and a little more. for ext2
and ext3 filesystems:
- they don't work with quotas
- they don't work with stock linux nfs (is there a nfs patch?)
- they also don't work on smp machines at all
- they are only partially supported by many of the userland utils
however, there's also alternatives. xfs (also available as a kernel patch)
supports acls and is reportedly much more stable. of course if you still
want to do stuff over nfs you're sol. another alternative is to give
afs a try (kernel-module package available), which is a distributed
network filesystem that afaik implements acls over the network.
anyway hth,
sean
On Thu, Feb 06, 2003 at 12:55:57AM +0100, Thomas Ritter wrote:
> Hi all,
>
> does anyone know the actual status of ACL support in linux regarding
> usability? Are there any plans on shipping debian OSes using ACLs from
> installation on in its filesystem one day? At least ship a precompiled
kernel
> for this? Or is it too experimental, tar doesn't get it, no easy NFS with
> ACLs, no Quota... But that seems okay for many uses.
> When building systems with subadministrators, this really comes in handy.
The
> old UNIX file rights are okay for many uses, but there really are reasons
for
> ACLs.
>
> Thomas Ritter
>
>
> --
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
>
Reply to: