Re: [PATCH v8 10/41] richacl: Permission check algorithm

2015-09-28 Thread Andreas Grünbacher
2015-09-28 18:29 GMT+02:00 J. Bruce Fields : > On Mon, Sep 28, 2015 at 06:25:23PM +0200, Andreas Grünbacher wrote: >> 2015-09-28 18:08 GMT+02:00 J. Bruce Fields : >> > The above also skips the following group_mask application on any unix >> > group. >> >> Really? How does it do that? > > Sorry, I

Re: [PATCH v8 10/41] richacl: Permission check algorithm

2015-09-28 Thread J. Bruce Fields
On Mon, Sep 28, 2015 at 06:25:23PM +0200, Andreas Grünbacher wrote: > 2015-09-28 18:08 GMT+02:00 J. Bruce Fields : > > On Mon, Sep 28, 2015 at 12:09:01AM +0200, Andreas Gruenbacher wrote: > >> + /* > >> + * Check if the acl grants the requested access and determine which > >> + *

Re: [PATCH v8 10/41] richacl: Permission check algorithm

2015-09-28 Thread Andreas Grünbacher
2015-09-28 18:08 GMT+02:00 J. Bruce Fields : > On Mon, Sep 28, 2015 at 12:09:01AM +0200, Andreas Gruenbacher wrote: >> + /* >> + * Check if the acl grants the requested access and determine which >> + * file class the process is in. >> + */ >> + richacl_for_each_entry(ace,

Re: [PATCH v8 10/41] richacl: Permission check algorithm

2015-09-28 Thread J. Bruce Fields
On Mon, Sep 28, 2015 at 12:09:01AM +0200, Andreas Gruenbacher wrote: > A richacl roughly grants a requested access if the NFSv4 acl in the > richacl grants the requested permissions according to the NFSv4 > permission check algorithm and the file mask that applies to the process > includes the

Re: [PATCH v8 10/41] richacl: Permission check algorithm

2015-09-28 Thread Andreas Grünbacher
2015-09-28 18:29 GMT+02:00 J. Bruce Fields : > On Mon, Sep 28, 2015 at 06:25:23PM +0200, Andreas Grünbacher wrote: >> 2015-09-28 18:08 GMT+02:00 J. Bruce Fields : >> > The above also skips the following group_mask application on any unix >> > group. >>

Re: [PATCH v8 10/41] richacl: Permission check algorithm

2015-09-28 Thread Andreas Grünbacher
2015-09-28 18:08 GMT+02:00 J. Bruce Fields : > On Mon, Sep 28, 2015 at 12:09:01AM +0200, Andreas Gruenbacher wrote: >> + /* >> + * Check if the acl grants the requested access and determine which >> + * file class the process is in. >> + */ >> +

Re: [PATCH v8 10/41] richacl: Permission check algorithm

2015-09-28 Thread J. Bruce Fields
On Mon, Sep 28, 2015 at 12:09:01AM +0200, Andreas Gruenbacher wrote: > A richacl roughly grants a requested access if the NFSv4 acl in the > richacl grants the requested permissions according to the NFSv4 > permission check algorithm and the file mask that applies to the process > includes the

Re: [PATCH v8 10/41] richacl: Permission check algorithm

2015-09-28 Thread J. Bruce Fields
On Mon, Sep 28, 2015 at 06:25:23PM +0200, Andreas Grünbacher wrote: > 2015-09-28 18:08 GMT+02:00 J. Bruce Fields : > > On Mon, Sep 28, 2015 at 12:09:01AM +0200, Andreas Gruenbacher wrote: > >> + /* > >> + * Check if the acl grants the requested access and determine

[PATCH v8 10/41] richacl: Permission check algorithm

2015-09-27 Thread Andreas Gruenbacher
A richacl roughly grants a requested access if the NFSv4 acl in the richacl grants the requested permissions according to the NFSv4 permission check algorithm and the file mask that applies to the process includes the requested permissions. Signed-off-by: Andreas Gruenbacher Reviewed-by: "J.

[PATCH v8 10/41] richacl: Permission check algorithm

2015-09-27 Thread Andreas Gruenbacher
A richacl roughly grants a requested access if the NFSv4 acl in the richacl grants the requested permissions according to the NFSv4 permission check algorithm and the file mask that applies to the process includes the requested permissions. Signed-off-by: Andreas Gruenbacher