Re: Permission systems with ACLs (was RE: About the login shell)
Le jeu 22/08/2002 à 08:37, Lionel Elie Mamane a écrit :
> Why the hell have you created "Untrusted Students" in the first place?
> If you have created that group, you already think in a "Deny ACE"
> way. If, at group creation time, you keep in mind that a group is used
> only to give additional rights, not to remove them, you would have
> created "Students" and "Trusted Students". My point is that if your
> system does not support Deny ACEs, (with a good admin), you wouldn't
> end up in this situation: He would have never created the group
> "Untrusted Students", because it is useless.
I fail to see the real use of ACL vs traditional permissions in what you
describe... You're talking about root-defined groups... and they already
exist! See for example that recent article for a little discussion on
that subject:
http://www.onlamp.com/pub/a/bsd/2002/08/16/Big_Scary_Daemons.html
If users where able to create their own groups, eg friends(toto) would
be the group friends as defined by user toto, that would be new.
Just my two (euro)cents,
Snark on #hurd, #hurdfr
Reply to: