Gentoo Archives: gentoo-hardened

From: Michael Orlitzky <michael@××××××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] xattr/acl/cap
Date: Mon, 21 May 2012 00:02:34
Message-Id: 4FB97423.9080203@orlitzky.com
In Reply to: [gentoo-hardened] xattr/acl/cap by Alex Efros
1 On 05/20/2012 05:35 PM, Alex Efros wrote:
2 > Hi!
3 >
4 > ACL
5 > Not sure about consolekit requirement above, but otherwise it looks
6 > useless (if you don't need to use complicated file permissions).
7
8 ACLs are actually very nice if you can get over the initial hurdle of
9 figuring out how they work. They're a lot like permissions on Windows,
10 except there's a highly confusing mask entry and umask plays into it...
11
12 Anyway, a lot of the time with the standard unix permissions you're
13 forced to give access to some people who don't need it. ACLs make it
14 possible to do things right.