Odd ACL question
Dan Nelson
dnelson at allantgroup.com
Mon Feb 9 08:43:09 PST 2004
In the last episode (Feb 09), Harti Brandt said:
> On Sun, 8 Feb 2004, Tim Kientzle wrote:
> TK>On Sat, 7 Feb 2004, Tim Kientzle wrote:
> TK>>Joerg Schilling's "star" archives ACLs as follows:
> TK>>
> TK>>"user::rwx,group::r--,group:mail:rw-:6,mask::rw-,other::r--"
> TK>>
> TK>>Note the "group:mail:rw-:6" entry that contains a fourth
> TK>>field with the uid/gid number. ...
> TK>
> TK> * If the username exists and the UID conflicts with the local
> TK> system, ???
> TK>
> TK>This last case is the tough one. My temptation: map it to
> TK>an unused UID, issue a warning about the remap, and keep going.
>
> That may cause the problem I described. This may leave a file in a
> user directory that the user cannot delete without intervention of
> the root user, but its probably the simplest solution. What about
> non-existing groups?
Any file that a user creates, that user can delete. If you're talking
about a root user extracting something into a user's directory, that's
different, but you have the same problem even without ACLs.
--
Dan Nelson
dnelson at allantgroup.com
More information about the freebsd-hackers
mailing list