Re: ACLS on UFS2 from FreeBSD 5.1-RELEASE install.

From: Daniel C. Sobral <dcs_at_tcoip.com.br>
Date: Thu, 07 Aug 2003 09:02:31 -0300
Terry Lambert wrote:
> "Daniel C. Sobral" wrote:
> 
>>Scott M. Likens wrote:
>>
>>>Has anyone noticed the ACLS being disabled?
>>>
>>>tunefs -p /dev/da1s1c shows that ACLS are disabled on every partition I
>>>have, i've gone through them all.
>>>
>>>any reason why?
>>
>>ACL is not the standard unix permission. Why enable something most
>>people don't even know is there?
> 
> 
> Have you ever had the need to put someone in more than 16 inclusion
> or exclusion groups simultaneously, and run out of groups that could
> simultaneously be associated with a given credential?

Yes, that's why I enabled ACL here. Alas, I know FreeBSD supports ACL, 
and I know what semantics are used, so I'm not likely to be caught 
unaware by something I don't even know it's there.

You'll also notice I'm not questioning the _existence_ of ACL. My point 
is that FreeBSD is Unix (no matter what the lawyers say), and people 
don't usually think of ACL when they think of Unix. Ergo, enabling ACL 
by defautl violates POLA.

And, in FreeBSD, POLA is king.

(Or so we used to believe, no matter what we actually did. :)

-- 
Daniel C. Sobral                   (8-DCS)
Gerencia de Operacoes
Divisao de Comunicacao de Dados
Coordenacao de Seguranca
VIVO Centro Oeste Norte
Fones: 55-61-313-7654/Cel: 55-61-9618-0904
E-mail: Daniel.Capo_at_tco.net.br
         Daniel.Sobral_at_tcoip.com.br
         dcs_at_tcoip.com.br

Outros:
	dcs_at_newsguy.com
	dcs_at_freebsd.org
	capo_at_notorious.bsdconspiracy.net

"But I don't like Spam!!!!"
Received on Thu Aug 07 2003 - 03:02:59 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:18 UTC