Rich access control lists

Posted Oct 22, 2015 2:05 UTC (Thu) by bfields (subscriber, #19510)
In reply to: Rich access control lists by fandingo
Parent article: Rich access control lists

There's absolutely no reason why this needs to be done in POSIX bits, though. If the file/file-system is Richacl enabled, translate the chmod(2) (or the variety of other POSIX ACL syscalls) to Richacl -- solely operating on the Richacl xattrs. The POSIX bits, then, are just a virtual representation of Richacl xattrs.

Note that POSIX ACLs are quite a bit more complicated than mode bits, I wouldn't lump them together.

You can think of Andreas's patches as already implementing mode bits on top of Richacls, if you'd like. I'm not sure exactly what your complaint is there.

Going further and implementing full POSIX ACLs on top of Richacls would also be possible, but quite complicated, and I think Andreas's choice not to do that is reasonable.