fapifta commented on PR #2343: URL: https://github.com/apache/ozone/pull/2343#issuecomment-1482834125
As the user name related part of this PR is already included in #2466 and we have recent progress on that one, and also because the rest of the patch should not be pulled in (see below) I would suggest to close this PR for now. @pakapoj-tul @kerneltime what do you think? On the ACL inheritance: The Posix draft withdrawn but applied by many nix systems do specify that only the default ACLs are inherited from a parent directory. If we start to inherit ACCESS ACLs as well, that is pretty much against this standard, and with that it seems pretty much unexpected by any kind of user, especially as HDFS earlier, and all linux systems inherit just the default ACLs from the parent. With that I think we should not inherit the ACCESS ACLs. References: Usenix: https://www.usenix.org/legacy/publications/library/proceedings/usenix03/tech/freenix03/full_papers/gruenbacher/gruenbacher_html/main.html Solaris: https://docs.oracle.com/cd/E36784_01/html/E36883/acl-5.html SLES: https://documentation.suse.com/sles/12-SP4/html/SLES-all/cha-security-acls.html FreeBSD: https://man.freebsd.org/cgi/man.cgi?query=setfacl&sektion=1&apropos=0&manpath=FreeBSD+13.1-RELEASE+and+Ports -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
