[KLUG Members] Re: Mapping Windows ACLs to UNIX ACLs -- Ext2/3 and XFS ACLs are converging

[Bryan J. Smith]

--=-ne7ojg0Af2z6spt5Hflt
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Thu, 2002-11-14 at 01:07, Peter Buxton wrote:
> What is the most recommended source for 2.4.x POSIX ACL patches?
> Is it http://acl.bestbits.at/ ?

That project was for adding on to Ext2/3.  XFS includes support in its
codebase.  Since ACL support is not in 2.4, and XFS isn't either, it
will depend on which filesystem you choose -- although you can probably
patch both now, since they both use the same implementation.

I haven't kept up with the ACL developments myself.  All I know is that
Linus finally decided on the kernel API as of 2.5.3, and both Ext2/3 and
XFS were working towards that API.  I think XFS 1.2 for RedHat 7/8
(currently in pre-release) is backporting those to kernel 2.4, which
means it probably adds for both, but I'm not sure.

I've only used ACLs on XFS personally.  And there are other issues like
"how do I ensure my backup backs them up?"  For XFS, only xfsdump works
AFAIK.

I haven't played with RedHat 8.0 to see if they include the Ext2/3 ACL
patches.  They might have in their kernels (although are they
enabled?).  And their new preference for "star" (over GNU tar) might
also back them up, since it supports the POSIX 2001 ustar format with
ACLs I believe.

> And is there a Samba setting to turn on XFS/ACL-enabled ext2/ext3 ACL's?
> Or is it automagically detected?

No, you must re-compile with it enabled.

--=20
Bryan J. Smith, E.I.            Contact Info:  http://thebs.org
A+/i-Net+/Linux+/Network+/Server+ CCNA CIWA CNA SCSA/SCWSE/SCNA
---------------------------------------------------------------
The more government chooses for you, the less freedom you have.

--=-ne7ojg0Af2z6spt5Hflt
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQA9067WDjEszaVrzmQRAhRzAKDenyT/eTzrwDm+JhljonvgadCEqgCguNop
3hJhaFmM/9ojGCb1dosBXPA=
=49E8
-----END PGP SIGNATURE-----

--=-ne7ojg0Af2z6spt5Hflt--