[PATCH 2/2] vfs_ceph: implement ACL callbacks
jra at samba.org
Wed Feb 17 16:43:21 UTC 2016
On Tue, Feb 16, 2016 at 11:02:58PM -0500, Ira Cooper wrote:
> i'd say "use libacl if we can." If we can't, my thoughts are:
Don't think we can. The problem is libacl doesn't give
public access to the blobs. It's an abstraction layer
that hides the raw blob data.
> One copy of crappy code beats two.
Now *that* is a good idea :-).
> And I agree on RichACL. Though I think that library is constructed so we
> can pass the binary acl in and out, so there's no excuse not just to have a
> "RichACL" layer, in samba, and some VFS calls to deal with exactly how the
> filesystems deal with it.
I already did a prototype Samba -> RichACL VFS module
for Andreas. So we can add that as soon as the code
goes into the kernel.
More information about the samba-technical