Anyone think maybe _FIOSATIME ioctl ought to be supported on more
(ideally all) filesystems, and promoted from private to something more
widely usable?  Seems to me any really transparent backup utility would
like to be able to do this, to not mess up atime as a consequence of backing
up the file, nor ctime as a consequence of restoring the pre-backup atime.

If it were me, I'd want a privilege required for this, probably a new one,
to allow the distinction between PRIV_FILE_DAC_READ plus the new priv
(for backing up all files) versus just the new priv (for only backing up one's 
own);
allowing RBAC roles for either a system backup operator or user self-backup
to be created sensibly.  But maybe that means also either an interaction
between two privs (the new priv and PRIV_FILE_DAC_READ) or two new
privs, to be able to forbid most people from being able to transparently
reset the atime on files they don't own (but allow the hypothetical backup
operator the ability to do that).

Anyway, just one of those things I think I'd like to see a general solution for,
whether following that model, or an entirely new one.
 
 
This message posted from opensolaris.org
_______________________________________________
opensolaris-code mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/opensolaris-code

Reply via email to