From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751716AbcFWRdV (ORCPT ); Thu, 23 Jun 2016 13:33:21 -0400 Received: from elasmtp-scoter.atl.sa.earthlink.net ([209.86.89.67]:46231 "EHLO elasmtp-scoter.atl.sa.earthlink.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751431AbcFWRdU convert rfc822-to-8bit (ORCPT ); Thu, 23 Jun 2016 13:33:20 -0400 X-Greylist: delayed 1043 seconds by postgrey-1.27 at vger.kernel.org; Thu, 23 Jun 2016 13:33:20 EDT DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=dk20050327; d=mindspring.com; b=NkGJVV2/YPaQL6Dloyvhbdib31PWIBB0dRahsDGkBqFGUf5M1+k5mVq3rW5IxoLx; h=Received:From:To:Cc:References:In-Reply-To:Subject:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:X-Mailer:Thread-Index:Content-Language:X-Antivirus-Status:X-ELNK-Trace:X-Originating-IP; From: "Frank Filz" To: "'Weston Andros Adamson'" , "'Andreas Gruenbacher'" Cc: "'Linux Kernel'" , , "'linux-nfs list'" , "'Weston Adamson'" References: <39cf890265e2a906a1cf41d6949b5be69903a064.1429868795.git.agruenba@redhat.com> <56F61F7E-9B41-45DD-B478-FE9329DD9983@monkey.org> In-Reply-To: <56F61F7E-9B41-45DD-B478-FE9329DD9983@monkey.org> Subject: RE: [RFC v3 42/45] nfs: Add richacl support Date: Thu, 23 Jun 2016 10:15:31 -0700 Message-ID: <145e01d1cd72$d9b8d570$8d2a8050$@mindspring.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8BIT X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQFhAZmSTBYApv3AaF70HvmdOHyTDgFhAZmSAj7hncACg9ct4qCnw8IQ Content-Language: en-us X-Antivirus: avast! (VPS 160623-2, 06/23/2016), Outbound message X-Antivirus-Status: Clean X-ELNK-Trace: 136157f01908a8929c7f779228e2f6aeda0071232e20db4d03ab8ad3d9c038f9c1fa4c611c42571e350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c X-Originating-IP: 76.115.190.27 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org > First, let me say thanks for all the work! We (Primary Data) have been using > samba with the vfs_richacl module reexporting an nfsv4.2 mount and things > are working pretty well. You can count on us for testing, bug fixing and code > review. > > Now for my question: It looks like this call to richacl_apply_masks in the client > xattr_set path exists so that the knfsd permission check algorithm works > correctly. > This makes some pretty big assumptions about the server’s implementation. > There are other servers out there besides knfsd! > > I think this will have to be fixed before this patch can be accepted. I’m willing > to help, but I’m wondering where this should be fixed: > > Do we call richacl_apply_masks on the server before setting the xattr so the > normalized acl is saved, or should we save the ACL as-is and call > richacl_apply_masks before it’s used? I definitely want to hear more about this. At some point we will utilize RichACLs in Ganesha. Frank --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus