[Pvfs2-developers] patches: permission/acl bug fixes

Murali Vilayannur murali.vilayannur at gmail.com
Thu Apr 5 11:51:17 EDT 2007


Hi Sam,

> It seems like it should be possible to do that format checking of the
> acl when the system.posix_acl_access extended attribute is set.  Does
> it make sense to add a callouts framework to set-eattr to do format
> checking for specific xattrs?

Hmm.. Given that acl's are encoded while setting the acl's, the format
checking on client-side is implicit I would think. Did you imply a
format checking on the server-side?
The only unlikely reason I can think of why acl's could get trashed on
the db is if pvfs seteattr operation on the acl keyval was invoked
directly from user-space instead of the through the usual setfacl()
program/kernel.
thanks,
Murali


More information about the Pvfs2-developers mailing list