Re: [PATCH v8 10/41] richacl: Permission check algorithm

2015-09-28 Thread Andreas Grünbacher
2015-09-28 18:29 GMT+02:00 J. Bruce Fields : > On Mon, Sep 28, 2015 at 06:25:23PM +0200, Andreas Grünbacher wrote: >> 2015-09-28 18:08 GMT+02:00 J. Bruce Fields : >> > The above also skips the following group_mask application on any unix >> > group. >> >> Really? How does it do that? > > Sorry, I m

Re: [PATCH v8 10/41] richacl: Permission check algorithm

2015-09-28 Thread J. Bruce Fields
On Mon, Sep 28, 2015 at 06:25:23PM +0200, Andreas Grünbacher wrote: > 2015-09-28 18:08 GMT+02:00 J. Bruce Fields : > > On Mon, Sep 28, 2015 at 12:09:01AM +0200, Andreas Gruenbacher wrote: > >> + /* > >> + * Check if the acl grants the requested access and determine which > >> + * file

Re: [PATCH v8 10/41] richacl: Permission check algorithm

2015-09-28 Thread Andreas Grünbacher
2015-09-28 18:08 GMT+02:00 J. Bruce Fields : > On Mon, Sep 28, 2015 at 12:09:01AM +0200, Andreas Gruenbacher wrote: >> + /* >> + * Check if the acl grants the requested access and determine which >> + * file class the process is in. >> + */ >> + richacl_for_each_entry(ace, ac

Re: [PATCH v8 10/41] richacl: Permission check algorithm

2015-09-28 Thread J. Bruce Fields
On Mon, Sep 28, 2015 at 12:09:01AM +0200, Andreas Gruenbacher wrote: > A richacl roughly grants a requested access if the NFSv4 acl in the > richacl grants the requested permissions according to the NFSv4 > permission check algorithm and the file mask that applies to the process > includes the requ