From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1758225Ab1IHKgT (ORCPT ); Thu, 8 Sep 2011 06:36:19 -0400 Received: from e1.ny.us.ibm.com ([32.97.182.141]:51938 "EHLO e1.ny.us.ibm.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1758153Ab1IHKgR (ORCPT ); Thu, 8 Sep 2011 06:36:17 -0400 From: "Aneesh Kumar K.V" To: "J. Bruce Fields" Cc: agruen@kernel.org, akpm@linux-foundation.org, dhowells@redhat.com, linux-fsdevel@vger.kernel.org, linux-nfs@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH -V6 17/26] richacl: Permission check algorithm In-Reply-To: <20110907215022.GI8074@fieldses.org> References: <1315243548-18664-1-git-send-email-aneesh.kumar@linux.vnet.ibm.com> <1315243548-18664-18-git-send-email-aneesh.kumar@linux.vnet.ibm.com> <20110907215022.GI8074@fieldses.org> User-Agent: Notmuch/0.5-318-g52e4ded (http://notmuchmail.org) Emacs/23.2.1 (x86_64-pc-linux-gnu) Date: Thu, 08 Sep 2011 16:04:44 +0530 Message-ID: <877h5j5nln.fsf@skywalker.in.ibm.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii x-cbid: 11090810-6078-0000-0000-0000007B592B Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, 7 Sep 2011 17:50:22 -0400, "J. Bruce Fields" wrote: > On Mon, Sep 05, 2011 at 10:55:39PM +0530, Aneesh Kumar K.V wrote: > > From: Andreas Gruenbacher > > > > As in the standard POSIX file permission model, each process is the > > owner, group, or other file class. A process is > > > > - in the owner file class if it owns the file, > > - in the group file class if it is in the file's owning group or it > > matches any of the user or group entries, and > > - in the other file class otherwise. > > > > Each file class is associated with a file mask. > > > > A richacl grants a requested access if the NFSv4 acl in the richacl > > grants the requested permissions (according to the NFSv4 permission > > check algorithm) and the file mask that applies to the process includes > > the requested permissions. > > I assume that by default any ui normally recalculates an upper-bound > mask automatically when you add an ace, as the posix setfacl does, so > the user doesn't have to think about masks too much? > yes. richacl userspace command does this. -aneesh