[Acl-Devel] NFS ACL support...

[LA Walsh]

You sure about this one?

ACL's are something that is in the base IRIX functionality -- not just
in the Trusted product just as auditing and capabilities are in the base
product.

The trusted product is the one that has MAC turned on and disables 'root'
checks.
I.e. -- in normal IRIX, privilege checks check for capabilities first then
check
if UID==0 to decide whether or not to return pass/fail.  Under trusted IRIX,
the
2nd part of that check is removed.


-l

To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-discuss" in the body of the message