> On top of which, ACLs suffer the same illness of any stat-based > checking, insofar as checks against them are only an approximation > to reality, potentially full of race conditions. It's really the OS > that's going to do the ACL checking, and it'll do it when you do the > actual operation, not the stat() call. Arguably a "correct" way to > program is to ignore stat-like stuff entirely and just try to do the > thing you want to do, and be prepared for the OS to reject it--which > you should have been prepared for anyway...
Yup. <cue in Nike slogan> > (Of course, fstat() does help with some of the race conditions by > intentionally "losing" the race, as it were.) > > Larry