From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id AB99BC433F5 for ; Thu, 6 Oct 2022 06:32:05 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229453AbiJFGcE (ORCPT ); Thu, 6 Oct 2022 02:32:04 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:56108 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229513AbiJFGcD (ORCPT ); Thu, 6 Oct 2022 02:32:03 -0400 Received: from mail-ej1-x62b.google.com (mail-ej1-x62b.google.com [IPv6:2a00:1450:4864:20::62b]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 2D3C13AE51 for ; Wed, 5 Oct 2022 23:32:00 -0700 (PDT) Received: by mail-ej1-x62b.google.com with SMTP id z23so2263420ejw.12 for ; Wed, 05 Oct 2022 23:32:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=szeredi.hu; s=google; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date; bh=mHju16tHxpXl3EK4c7Bh3/hsomdw2uS+nwGbV/7jvJE=; b=iySenhqEf+XihjlDc4yaj8PGwDwtb8erweo1YsY4IcBWCgSq5VaSLzZDVtDF+VqQAC BEHszdgbn3nX20tgDQ677zAacRoyxXK4hXS9taeizO0XiacsmzZoVQDmH8s0fEn/i8DX wAbMjCOdqOLgddyiDGsCCI+cuaoQiFQWoAKds= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date; bh=mHju16tHxpXl3EK4c7Bh3/hsomdw2uS+nwGbV/7jvJE=; b=DU4j+/uSkYISQOGJSJHPc8tBcnAbuOj+U29ADgVBy5vrSKcngggkdBEgg0+4z+KB9V /Dc0NJ2isosPua6TG0sSprp9feT5n0ZA79bo9zgWPhmycpDDjzMGSIskIPa5zyTdvP3H lpcwtd7fOh0WSxOU1eACwEyZCGPR9LYck5S/uBnfdyD4Jd6avYUlKqnxF+D5xW2/Zdco IuVwevfD4Q07/aPb8TkoT4j9i+KJDFvHm/bye7NIDjJ/HegmiLgPNDoF7NJXxVpQJrUh 1CLSVe8R/0hyq9I8HjaTYEW/3Hc0mud6I33+Y9TRb6Oy1G9yi89yj3WWOuhBpWn64+/7 csRw== X-Gm-Message-State: ACrzQf1jBpghW/INSXivtdNHjzpCocFpO8jKwMOWRCeeY+4FxXdw26Ga 42g25AKUkCBW8enTSTBxilurY8pHt/K6wHbVi2Ydcg== X-Google-Smtp-Source: AMsMyM5f9K6PIAM9zeO5vKX91jTFdHXC9+MnXMlia0zJkE65UlxJxiFVol75UCFnY+6Gy9vUC0i9YtJsYgZ3KGz0mEc= X-Received: by 2002:a17:907:7f9e:b0:78b:c4af:bcca with SMTP id qk30-20020a1709077f9e00b0078bc4afbccamr2714447ejc.187.1665037918815; Wed, 05 Oct 2022 23:31:58 -0700 (PDT) MIME-Version: 1.0 References: <20220929153041.500115-1-brauner@kernel.org> <20220929153041.500115-5-brauner@kernel.org> <20220930090949.cl3ajz7r4ub6jrae@wittgenstein> <20221005071508.lc7qg6cffqrhbc4d@wittgenstein> In-Reply-To: <20221005071508.lc7qg6cffqrhbc4d@wittgenstein> From: Miklos Szeredi Date: Thu, 6 Oct 2022 08:31:47 +0200 Message-ID: Subject: Re: [PATCH v4 04/30] fs: add new get acl method To: Christian Brauner Cc: Steve French , linux-fsdevel@vger.kernel.org, Seth Forshee , Christoph Hellwig , Al Viro , linux-security-module@vger.kernel.org, Steve French Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-fsdevel@vger.kernel.org On Wed, 5 Oct 2022 at 09:15, Christian Brauner wrote: > We're just talking about thet fact that > {g,s}etxattr(system.posix_acl_{access,default}) work on cifs but > getting acls based on inode operations isn't supported. Consequently you > can't use the acls for permission checking in the vfs for cifs. If as > you say below that's intentional because the client doesn't perform > access checks then that's probably fine. Now I just need to wrap my head around how this interacts with all the uid/gid transformations. Do these (userns, mnt_userns) even make sense for the case of remotely checked permissions? Thanks, Miklos