NT inherited its file security strategy from Digital's VMS.

This uses a 16 bit mask: (System:RWED,Owner:RWED,Group:RWED,World:RWED)

RWED bits are Read, Write, Execute and Delete.

As far as I know, NT uses the same scheme.


Also, they have an equivalent of Access Control Lists, which allow a
complete other layer of permissioning unrelated to the UID/GID of the owner.
Individual people are granted 'rights', which work a bit like groups. Files
can have access control lists, which provide different RWED permissions for
holders of rights, compared with non-holders.

Using ACLs slows down your file opens and directory scans significantly. So,
unless you're paranoid or working with potential hackers, it's usually not
worth bothering.

Ivor.

-----Original Message-----
From: Dominic Mitchell [mailto:[EMAIL PROTECTED]]
Sent: 21 December 2001 10:06
To: [EMAIL PROTECTED]
Subject: Re: Dual boot

[...]

Mmmm, yes.  Cacls.  More sophisticated permissions does not
necessarily mean "better".  I have yet to see a decent explanation of
NT permission bits and how they interact and functions with NT system
calls (the 12 unix permission bits are difficult enough).


-----------------------------------------------------------------------
The information contained in this e-mail is confidential and solely 
for the intended addressee(s). Unauthorised reproduction, disclosure, 
modification, and/or distribution of this email may be unlawful. If you 
have received this email in error, please notify the sender immediately 
and delete it from your system. The views expressed in this message 
do not necessarily reflect those of LIFFE (Holdings) Plc or any of its 
subsidiary companies.
-----------------------------------------------------------------------

Reply via email to