Deny rules may make troubles when set from Windows as Windows first
processes deny rules while Illumos/Solaris respect order of rules like a
firewall. If you set them on Illumos this is not an item as you enter
the order of a rule during acl setup.
Normally you should not need deny rules as a missing allow is equal to
deny. Deny is good for an excemption of an otherwise quite global allow
rule (everyone but you can access)
I think I finally managed to configured simple yet efficient ACLs
using a mix of allow/deny and inheritance.
Thanks guys.
**
------------------------------------------
illumos: illumos-discuss
Permalink:
https://illumos.topicbox.com/groups/discuss/Te31e27e278d377ff-Md61950184bb4239b3654d9a0
Delivery options: https://illumos.topicbox.com/groups/discuss/subscription
