[OpenAFS] some basic infos about security

Charles Clancy security@xauth.net
Thu, 10 Apr 2003 19:35:38 -0500 (CDT)


On Thu, 10 Apr 2003, Lo'oRiS il Kabukimono wrote:

> PS: i'll stick to ACL, but i'd like to have enough time to create a
> program to automatically update ACLs when somebody chmods or chowns

In my experience, users who are savvy enough to figure out chmod can also
figure out AFS ACLs.

Such a script wouldn't be too difficult to write -- the main problem is
that AFS ACLs are directory-based, not file-based.

[ t charles clancy ]--[ tclancy@uiuc.edu ]--[ www.uiuc.edu/~tclancy ]