[illumos-Developer] RFC: Resurrect the ZFS "aclmode" property

Bill Sommerfeld sommerfeld at hamachi.org
Sun Feb 27 11:49:25 PST 2011


On 02/27/11 02:02, Garrett D'Amore wrote:
> We reviewed this internally first, and obviously I'm strongly supportive.  I would of course like further feedback from the community at large.

as you might guess from my posting on zfs-discuss when this came up, I'm 
also strongly supportive of further experimentation around ways for acls 
and chmod to interact.  There are environments where truncating an acl 
is the wrong behavior -- when the application is acl-unaware and the 
admin is acl-aware, I say the admin's intent should dominate.

It should be possible to prevent an acl-ignorant application from 
destroying acls in those environments.

The pre-b147 choices aren't optimal, but the lack of choice in 147 and 
later is worse.

Another relatively conservative behavior that may be worth experimenting 
with is a mode where the acl is considered authoritative, such that 
chmods inconsistent with the acl would fail.
(I'm handwaving about the meaning of "consistent").

					- Bill







More information about the Developer mailing list