[PATCH 2/2] vfs_ceph: implement ACL callbacks

[Jeremy Allison]

On Tue, Feb 16, 2016 at 11:02:58PM -0500, Ira Cooper wrote:
> 
> i'd say "use libacl if we can."  If we can't, my thoughts are:

Don't think we can. The problem is libacl doesn't give
public access to the blobs. It's an abstraction layer
that hides the raw blob data.

> One copy of crappy code beats two.

Now *that* is a good idea :-).

> And I agree on RichACL.  Though I think that library is constructed so we
> can pass the binary acl in and out, so there's no excuse not just to have a
> "RichACL" layer, in samba, and some VFS calls to deal with exactly how the
> filesystems deal with it.

I already did a prototype Samba -> RichACL VFS module
for Andreas. So we can add that as soon as the code
goes into the kernel.