Jim Rees wrote:

  Any distributed file system has the same problem, if files in the home
  directory need to be accessed during login. NFSv4 may have to address the
  same problems.

The problem with afs is that you can't put an acl on a file.  NFSv4 doesn't
have this problem.

The problem is not about ACLs on files or directories, it more about
allowing world readable access to what some might consider sensitive data.
I still would not like the .k5login world readable.

What I meant about NFS vs AFS is that both have to live in a unix world
where the system daemons are run as root, and unix code assumes root
automaticly has read access to the home directory in all cases. A protected
NFS home directory has the same problem as an AFS home directory.


_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info



--

 Douglas E. Engert  <[EMAIL PROTECTED]>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439
 (630) 252-5444
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to