[OpenAFS] Implicit privilege to do "fs setacl" in a directory

Christopher D. Clausen cclausen@acm.org
Mon, 29 Jan 2007 12:38:51 -0600

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=