[OpenAFS] anon FTP upload directory ACL

[Russ Allbery]

Derek Atkins <warlord@MIT.EDU> writes:

> Last I checked it was only the owner of the volume that had implicit 'a'
> access, not the owner of a directory.  So I dont think there is much of
> an exloit here.

I just tried it, and it sure looks like it works to me.  Try it yourself;
unless this has changed very recently, it's the owner of any directory.

I don't know what "owner of the volume" would even mean in AFS.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>