[PATCH v12 31/49] richacl: Isolate the owner and group classes

2015-10-23 Thread Andreas Gruenbacher
When applying the file masks to an acl, we need to ensure that no process gets more permissions than allowed by its file mask. This may require inserting an owner@ deny ace to ensure this if the owner mask contains fewer permissions than the group or other mask. For example, when applying mode

[PATCH v12 31/49] richacl: Isolate the owner and group classes

2015-10-23 Thread Andreas Gruenbacher
When applying the file masks to an acl, we need to ensure that no process gets more permissions than allowed by its file mask. This may require inserting an owner@ deny ace to ensure this if the owner mask contains fewer permissions than the group or other mask. For example, when applying mode