ACL permission definitions

[Chris Faulhaber]

I found that we define ACL_PERM_(READ|WRITE|EXEC) while the
spec (POSIX.1e, 23.2.2) states the proper definitions are
ACL_EXECUTE, ACL_READ, and ACL_WRITE.  Oddly enough, I could
have sworn that ACL_PERM_* was the standard, but it seems to
not be the case.

Additionally, we still lack proper internal and external
acl definitions.  AFAICT, this will be required for a
proper acl_get_entry() function which takes ACL_FIRST_ENTRY
or ACL_NEXT_ENTRY as an argument, requiring a placeholder
to track the current entry.

Finally, we still need ACL_UNDEFINED_TAG and ACL_UNDEFINED_ID
definitions to complete the list.

I have a patch at
http://www.fxp.org/jedgar/FreeBSD/acl_fixes.diff that
corrects ACL_PERM_*, adds ACL_(FIRST|NEXT)_ENTRY,
ACL_UNDEFINED_TAG, and ACL_UNDEFINED_ID.  Work is
underway to finish the external/internal acl
representation so acl_get_entry() can be completed.
Comments/concerns are appreciated.

-- 
Chris D. Faulhaber - jedgar at fxp.org - jedgar at FreeBSD.org
--------------------------------------------------------
FreeBSD: The Power To Serve   -   http://www.FreeBSD.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/trustedbsd-discuss/attachments/20010409/a53467cd/attachment.bin