Re: linux capabilities and ACLs

Chip Salzenberg (chip@perlsupport.com)
Sat, 6 Feb 1999 16:53:10 -0500

According to Rik van Riel:
> On Thu, 4 Feb 1999, Tim Smith wrote:
> > ... the TOPS-10 behaviour of only checking the access file on
> > accesses that would otherwise fail ...
>
> This _is_ a problem. I can imagine the situation where you want a
> file to be world-readable EXCEPT for that one special network user
> (say, nobody).

That's hardly good practice. IMO, 99.44% of the time, it's better to
specify who to _include_ rather than who to _exclude_, if only because
new accounts get created all the time.

"You didn't exclude 'guest'?!"
"When I created the file, there was no 'guest'!!"

'Nuff said.

-- 
Chip Salzenberg      - a.k.a. -      <chip@perlsupport.com>
      "When do you work?"   "Whenever I'm not busy."


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/