Jonathan Weiss writes:
...
> possible to give chown a negative argument. Does anyone know of
> another way to get a group to have the implicit rights to correct ACL
> mistakes in a volume, or some other solution to our problem?
You could easily enough write a program to do the
"chown". Basically, it would need to play "cache manager",
long enough to do an RXAFS_StoreStatus on the root.
(the root Fid has a Vnode & Unique of 1.)
While the program could be a simple one-shot, it would
probably be best to write it as a client-server type
application, where the server is always running. When you
contact the fileserver, it thinks your ip-address/port are
going to be there for a while, & it logs strange messages
everytime a ip-address/port stops responding (it thinks that
the host has disappeared.) Obviously, the server should
make suitable security arrangements (can't have just anybody
changing volume owners.)
Another slightly clumsier way to do it would be to do
a "vos restore", with the appropriate owner in the data
being restored. As it happens we (umich.edu) use this
approach with individual IFS home directories, as an incidental
part of the process of populating newly created home directories
with dot files.
-Marcus Watts
UM ITD PD&D Umich Systems Group