On Wed, 6 Aug 2003, Daniel C. Sobral wrote:

> >   Note: this change contains a semantic bugfix for new file creation:
> >   we now intersect the ACL-generated mode and the cmode requested by
> >   the user process.  This means permissions on newly created file
> >   objects will now be more conservative.  In the future, we may want
> >   to provide alternative semantics (similar to Solaris and Linux) in
> >   which the ACL mask overrides the umask, permitting ACLs to broaden
> >   the rights beyond the requested umask.
> FWIW, I don't like it. This means I'll have to change my umask to o+rw
> for my ACLs to work correctly, since I use ACLs to _give_ rights in ways
> that umask cannot. 

I'm in the throes of implementing changes that push umask processing down
into individual file systems, permitting UFS ACLs to override the umask
using the ACL mask, which would reproduce the Solaris/Linux model
(non-POSIX.1e).  However, there are some interesting implementation
question shtere, so it will probably be a bit (perhaps a couple of weeks)
before I have a useful prototype worth reviewing.  I agree that those
semantics are useful, however :-).

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
[EMAIL PROTECTED]      Network Associates Laboratories

[EMAIL PROTECTED] mailing list
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to