Randolph J. Herber, CD/DCD/SPG, x2966 says:
>
> When I can not run programs without making them also readable,
> I feel something is broke.
>
This is an odd idea. The notion of an unreadable executable program in
a networked environment with untrusted workstations is ridiculous.
Furthermore, I can't think of a single piece of software that requires
that you set the permissions on the executables that way.
NFS pretends to let you set your permissions that way, but in reality
it is only the operating system on the local workstation pretending
along with the NFS server -- anyone can, in fact, pretend to be an NFS
client and read any of those supposedly unreadable files if they have
the right to execute them (indeed, they can completely break NFS
permissions if they pretend to be a client as NFS protections of
anything are mostly a joke.)
AFS is honest about the situation and doesn't let you practice self
deception. I find this refreshing and valuable.
Perry
