On Wed, 6 Aug 2003, Daniel C. Sobral wrote: > > Note: this change contains a semantic bugfix for new file creation: > > we now intersect the ACL-generated mode and the cmode requested by > > the user process. This means permissions on newly created file > > objects will now be more conservative. In the future, we may want > > to provide alternative semantics (similar to Solaris and Linux) in > > which the ACL mask overrides the umask, permitting ACLs to broaden > > the rights beyond the requested umask. > > FWIW, I don't like it. This means I'll have to change my umask to o+rw > for my ACLs to work correctly, since I use ACLs to _give_ rights in ways > that umask cannot. I'm in the throes of implementing changes that push umask processing down into individual file systems, permitting UFS ACLs to override the umask using the ACL mask, which would reproduce the Solaris/Linux model (non-POSIX.1e). However, there are some interesting implementation question shtere, so it will probably be a bit (perhaps a couple of weeks) before I have a useful prototype worth reviewing. I agree that those semantics are useful, however :-). Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert_at_fledge.watson.org Network Associates LaboratoriesReceived on Wed Aug 06 2003 - 09:20:48 UTC
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:18 UTC