Rich access control lists

Posted Oct 22, 2015 0:59 UTC (Thu) by fandingo (guest, #67019)
In reply to: Rich access control lists by Cyberax
Parent article: Rich access control lists

What's the insanity? If you don't want to express anything beyond POSIX ACLs, it's nothing more than a storing data in a different format. Plus, it's not some brand-new format; it's using well-tested xattrs.

Rich access control lists

Posted Oct 22, 2015 1:09 UTC (Thu) by Cyberax (✭ supporter ✭, #52523) [Link]

> What's the insanity? If you don't want to express anything beyond POSIX ACLs, it's nothing more than a storing data in a different format.
And a translation layer. And significant additional overhead (xattrs are SLOW compared to the fastpath).

So no, it's definitely not something I'd want to ever see close to my systems.

Rich access control lists

Posted Oct 23, 2015 19:59 UTC (Fri) by nevyn (guest, #33129) [Link]

Speed should override any other concerns here, look at the time of a large rsync on files with just modes vs. those which have xattrs or ACLs.