[NFS] Re: [Acl-Devel] NFS ACL support...

[David Collier-Brown]

Andreas Gruenbacher wrote: 
> When I last took a look at the spec I realized there's no one-to-one
> mapping between NFSv4 ACLs and Posix ACLs: There's no representation for
> the ACL_MASK ACL entry. In addition, semantics of NFS ACLs and Posix ACLs
> differ. I would have expected that whatever sort of ACLs an OS implements
> are made accessible via NFS; however NFS also defines ACL semantics.

	The mask entry is not needed unless you also wish
	to preserve unix permission-bit semantics: filesystems
	like NT's don't need the mask.

	The semantic differences are real, but not unsurmountable:
	have a look at the samba 2.2.0 work, which stores a
	datastructure which is a superset of the known ACL
	implementations, and then maps "down" to an implementation
	as per the grey-book rules.

--dave
-- 
David Collier-Brown,  | Always do right. This will gratify some people
185 Ellerslie Ave.,   | and astonish the rest.        -- Mark Twain
Willowdale, Ontario   | //www.oreilly.com/catalog/samba/author.html
Work: (905) 415-2849 Home: (416) 223-8968 Email: davecb at canada.sun.com
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-discuss" in the body of the message