Preserving NTFS permissions.

[Christopher R. Hertel]

Jeremy Allison wrote:
> On Wed, Jun 20, 2007 at 12:05:52PM -0500, Christopher R. Hertel wrote:
>> I may be in a position to do or help do the work.  I won't promise yet (you
>> know me too well anyway) but it does sound like an interesting problem to solve.
>>
>> Would we need only one ACE per file/directory or is it possible to have
>> multiple ACEs assigned?  I imagine the latter.
> 
> Store/restore the NDR linearization of the ACL. That's the easy part.
> Then you have to make it fit with checks on open(), and also obey
> the inheritance rules on the ACL in the parent directory. That's the
> hard part.

Yep.  You've painted a clear picture.  :)

...but open() is one of the functions passed through the VFS, isn't it?  My
hope is that we can localize the pain to a single module.

-- 
"Implementing CIFS - the Common Internet FileSystem" ISBN: 013047116X
Samba Team -- http://www.samba.org/     -)-----   Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/   -)-----   ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/     -)-----   crh at ubiqx.mn.org
OnLineBook -- http://ubiqx.org/cifs/    -)-----   crh at ubiqx.org