From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751059AbcGLU2S (ORCPT ); Tue, 12 Jul 2016 16:28:18 -0400 Received: from mail-vk0-f49.google.com ([209.85.213.49]:33881 "EHLO mail-vk0-f49.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750829AbcGLU2Q (ORCPT ); Tue, 12 Jul 2016 16:28:16 -0400 MIME-Version: 1.0 In-Reply-To: <20160712191142.GE449@fieldses.org> References: <1467294433-3222-1-git-send-email-agruenba@redhat.com> <1467294433-3222-18-git-send-email-agruenba@redhat.com> <1468324560.7798.14.camel@redhat.com> <20160712191142.GE449@fieldses.org> From: Andreas Gruenbacher Date: Tue, 12 Jul 2016 22:28:15 +0200 Message-ID: Subject: Re: [PATCH v23 17/22] richacl: Automatic Inheritance To: "J. Bruce Fields" Cc: Jeff Layton , Alexander Viro , Christoph Hellwig , "Theodore Ts'o" , Andreas Dilger , Trond Myklebust , Anna Schumaker , Dave Chinner , linux-ext4 , XFS Developers , LKML , linux-fsdevel , Linux NFS Mailing List , linux-cifs@vger.kernel.org, Linux API Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Jul 12, 2016 at 9:11 PM, J. Bruce Fields wrote: > On Tue, Jul 12, 2016 at 07:56:00AM -0400, Jeff Layton wrote: >> Barf. AI seems like a trainwreck waiting to happen. What are the >> chances that userland is going to get this right? > > This is just taken from Windows, so presumably Samba should do the right > thing (with one workaround required--see the discussion of PROTECTED in > the changelog). > >> Still, I do applaud the fact that you're just doing the bare minimum in >> kernel to support userland apps that want this. Thanks for not trying >> to push the propagation of the changed ACEs into the kernel. > > Agreed. But, again, this is just what Windows does. (I wonder whether > there's an OS that's actually tried do any sort of atomic propagation.) NetWare's NSS filesystem did have automatic propagation, but I think that was implemented by composing the permissions along the path to a file at access time. Andreas