On Thu, Dec 11, 2008 at 04:46:33PM -0700, Mark Shellenbaum wrote:
> Mark Shellenbaum wrote:
> >>> You should probably make sure that you just don't keep continually 
> >>> adding the same entry over and over again to the ACL.  With NFSv4 ACLs 
> >>> you can insert the same entry multiple times and if you keep doing it 
> >>> long enough you will eventually get an error back when you reach the 
> >>> ACE limit on the file.
> >> Note that logindevperm will reset the ownership and permission of the
> >> file each time a user logs in or out.  I guess I was assuming this would
> >> reset the ACL's as well.  Is this not the case?
> >>
> > 
> > Yes, it also changes the owner and group.
> > 
> >> At any rate, it wouldn't hurt to check to see if the ACL is there already.
> >> Do you have a code example that shows how to do that?
> >>
> > 
> > Nope, but you should be able to just use access(2) to determine if you 
> > need to add the ACL entry.
> > 
> 
> But that probably won't work since you won't be running as that user yet 
> and access(2) would be checking off of a privileged cred.

It'd be easy to use setreuid() to set the real UID to be gdm's.

Nico
-- 
_______________________________________________
zfs-discuss mailing list
zfs-discuss@opensolaris.org
http://mail.opensolaris.org/mailman/listinfo/zfs-discuss

Reply via email to