From Tim.Haley@sun.com Mon Oct 27 09:21:56 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m9RGLt5P010014 for ; Mon, 27 Oct 2008 09:21:55 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m9RGLoMs024376; Mon, 27 Oct 2008 10:21:55 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9E00J5BO4IAM00@nwk-avmta-1.sfbay.Sun.COM>; Mon, 27 Oct 2008 09:21:54 -0700 (PDT) Received: from dm-central-01.central.sun.com ([129.147.62.4]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9E00950O48ZP50@nwk-avmta-1.sfbay.Sun.COM>; Mon, 27 Oct 2008 09:21:44 -0700 (PDT) Received: from spidey.Central.Sun.COM (spidey.Central.Sun.COM [172.20.25.27]) by dm-central-01.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m9RGLhX1016623; Mon, 27 Oct 2008 10:21:43 -0600 (MDT) Received: from spidey.Central.Sun.COM (localhost [127.0.0.1]) by spidey.Central.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id m9RGJusZ018635; Mon, 27 Oct 2008 10:19:56 -0600 (MDT) Received: (from timh@localhost) by spidey.Central.Sun.COM (8.14.3+Sun/8.14.3/Submit) id m9RGJu4B018632; Mon, 27 Oct 2008 10:19:56 -0600 (MDT) Date: Mon, 27 Oct 2008 10:19:56 -0600 (MDT) From: Tim Haley Subject: New ZFS "passthrough-x" ACL inheritance rules [PSARC/2008/659 FastTrack timeout 11/03/2008] To: PSARC-ext@sun.com Cc: henson@acm.org, zfs-team@sun.com Message-id: <200810271619.m9RGJu4B018632@spidey.Central.Sun.COM> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 5252 I am sponsoring this fast-track for Mark Shellenbaum. Requested binding is patch/micro. Timeout is 11/03/2008. Template Version: @(#)sac_nextcase %I% %G% SMI This information is Copyright 2008 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: New ZFS "passthrough-x" ACL inheritance rules 1.2. Name of Document Author/Supplier: Author: Mark Shellenbaum 1.3 Date of This Document: 27 October, 2008 4. Technical Description SUMMARY: This proposal introduces a new property value "passthrough-x" for the ZFS aclinherit property. PROBLEM: ZFS allows an administrator to force file/directory creation modes due to the changes introduced by: PSARC/2008/231 New "passthrough" ACL inheritance rules This method is typically used to cause all "data" files to be created with an identical mode in a directory tree. An administrator sets up ACL inheritance so that all files are created with a mode, such as 0664 or 0666. This all works as expected for data files, but you might want to optionally include the execute bit from the file creation mode into the inherited ACL. One example is an output file that is generated from tools, such as "cc" or "gcc". If the inherited ACL doesn't include the execute bit, then the output executable from the compiler won't be executable until you use chmod(1) to change the file's permissions. PROPOSED SOLUTION: Introduce a "passthrough-x" property value for the "aclinherit" property. The ACE_EXECUTE permission will only be inherited for ACEs that affect the mode (owner@, group@, and everyone@) if an execute bit is set in the file creation mode. This behavior is only for files, directories continue to inherit ACLs as specified in PSARC/2008/231. EXAMPLES: First, look at an example of current behavior. The following ACL exists on a directory. $ ls -dV testdir owner@:rwxpdDaARWcC--:-di---:allow owner@:rwxpdDaARWcC--:------:allow group@:--x---a-R-c---:-di---:allow group@:--x---a-R-c---:------:allow everyone@:--x---a-R-c---:-di---:allow everyone@:--x---a-R-c---:------:allow owner@:rw-pdDaARWcC--:f-i---:allow group@:--------------:f-i---:allow everyone@:--------------:f-i---:allow When a file is created, it has this ACL. $ touch file.1 $ ls -V file.1 -rw-------+ 1 marks staff 0 Sep 29 13:04 a owner@:rw-pdDaARWcC--:------:allow group@:--------------:------:allow everyone@:--------------:------:allow Next, use "cc" to create an executable. $ cc -o t /home/marks/t.c $ ls -V t -rw-------+ 1 marks staff 7228 Sep 29 14:13 t owner@:rw-pdDaARWcC--:------I:allow group@:--------------:------I:allow everyone@:--------------:------I:allow This file isn't executable, it was forced into a creation mode based on the inherited ACL. If aclinherit is set to passthrough-x, the 'x' bit is inherited, but only if the application requests it. # zfs set aclinherit=passthrough-x For a "passthrough-x" example, the following ACL is set on the parent directory. $ ls -dV testdir owner@:rwxpdDaARWcC--:-di---:allow owner@:rwxpdDaARWcC--:------:allow group@:--x---a-R-c---:-di---:allow group@:--x---a-R-c---:------:allow everyone@:--x---a-R-c---:-di---:allow everyone@:--x---a-R-c---:------:allow owner@:rwxpdDaARWcC--:f-i---:allow group@:r-x-----------:f-i---:allow everyone@:r-x-----------:f-i---:allow Touch a file with a requested mode of 0644. $ touch t2 $ ls -V t2 -rw-r--r--+ 1 marks staff 7228 Sep 29 14:13 t2 owner@:rw-pdDaARWcC--:------I:allow group@:r-------------:------I:allow everyone@:r-------------:------I:allow The resulting mode is 0644. The 'x' bit was not inherited because the creation mode didn't request it. Now, try the 'cc' scenario again. Assume the creation mode is 0700. $ cc -o t /home/marks/t.c $ ls -V t -rwxr-xr-x+ 1 marks staff 7228 Sep 29 14:13 t owner@:rwxpdDaARWcC--:------I:allow group@:r-x-----------:------I:allow everyone@:r-x-----------:------I:allow The resulting mode is 0755 because 'cc' requested a mode of 0700 which caused the 'x' bits to be inherited from the owner@, group@ and everyone@ entries. MANPAGE DIFFS $ diff zfs.txt.new zfs.txt 539c539 < aclinherit=discard | noallow | secure | passthrough | passthrough-x --- > aclinherit=discard | noallow | secure | passthrough 552,557c552 < they are inherited. A file system with an "aclinherit" < property value of "passthrough-x" has the same semantics < as "passthrough", except that the owner@, group@, and < everyone@ ACEs inherit the execute permission only < if the file creation mode also requests the execute bit. --- > they are inherited. 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From Darren.Moffat@sun.com Mon Oct 27 09:37:55 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m9RGbs4l010514 for ; Mon, 27 Oct 2008 09:37:54 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m9RGbpDk032122; Mon, 27 Oct 2008 10:37:54 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9E00K1XOV4XH00@nwk-avmta-1.sfbay.Sun.COM>; Mon, 27 Oct 2008 09:37:52 -0700 (PDT) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9E009SHOV3ZL60@nwk-avmta-1.sfbay.Sun.COM>; Mon, 27 Oct 2008 09:37:51 -0700 (PDT) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m9RGbow5028709; Mon, 27 Oct 2008 16:37:50 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9E00G01OR3LM00@fe-emea-09.sun.com> (original mail from Darren.Moffat@Sun.COM); Mon, 27 Oct 2008 16:37:50 +0000 (GMT) Received: from [129.156.173.21] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9E00MS7OV1T540@fe-emea-09.sun.com>; Mon, 27 Oct 2008 16:37:50 +0000 (GMT) Date: Mon, 27 Oct 2008 16:37:49 +0000 From: Darren J Moffat Subject: Re: New ZFS "passthrough-x" ACL inheritance rules [PSARC/2008/659 FastTrack timeout 11/03/2008] In-reply-to: <200810271619.m9RGJu4B018632@spidey.Central.Sun.COM> Sender: Darren.Moffat@sun.com To: Tim Haley Cc: PSARC-ext@sun.com, henson@acm.org, zfs-team@sun.com Message-id: <4905EE5D.8030705@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200810271619.m9RGJu4B018632@spidey.Central.Sun.COM> User-Agent: Thunderbird 2.0.0.16 (X11/20080922) Status: RO Content-Length: 851 Tim Haley wrote: > PROPOSED SOLUTION: > > Introduce a "passthrough-x" property value for the "aclinherit" > property. The ACE_EXECUTE permission will only be inherited for > ACEs that affect the mode (owner@, group@, and everyone@) if > an execute bit is set in the file creation mode. This behavior > is only for files, directories continue to inherit ACLs as > specified in PSARC/2008/231. Any reason to have another aclinherit value here rather than just redefining passthrough from 2008/231 to have the behaviour from this case ? Basically is there actually perceived benefit in having both passthrough and passthrough-x given all the other capabilities of ACL inheritance and the ability to control execution using the 'exec' property ? Has 2008/231 actually shipped in a patch (Solaris 10) update release? -- Darren J Moffat From Mark.Shellenbaum@sun.com Mon Oct 27 09:44:12 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m9RGiC9L010705 for ; Mon, 27 Oct 2008 09:44:12 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m9RGi7CJ034786; Mon, 27 Oct 2008 10:44:11 -0600 (MDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9E00G1TP5M3G00@brm-avmta-1.central.sun.com>; Mon, 27 Oct 2008 10:44:10 -0600 (MDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9E00BQ9P5J2J50@brm-avmta-1.central.sun.com>; Mon, 27 Oct 2008 10:44:07 -0600 (MDT) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m9RGi74j003502; Mon, 27 Oct 2008 16:44:07 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9E00201N42FE00@mail-amer.sun.com> (original mail from Mark.Shellenbaum@Sun.COM); Mon, 27 Oct 2008 10:44:07 -0600 (MDT) Received: from [172.20.25.34] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9E00MZYP5EMT50@mail-amer.sun.com>; Mon, 27 Oct 2008 10:44:02 -0600 (MDT) Date: Mon, 27 Oct 2008 10:41:31 -0600 From: Mark Shellenbaum Subject: Re: New ZFS "passthrough-x" ACL inheritance rules [PSARC/2008/659 FastTrack timeout 11/03/2008] In-reply-to: <4905EE5D.8030705@Sun.COM> Sender: Mark.Shellenbaum@sun.com To: Darren J Moffat Cc: Tim Haley , PSARC-ext@sun.com, henson@acm.org, zfs-team@sun.com Message-id: <4905EF3B.9030709@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200810271619.m9RGJu4B018632@spidey.Central.Sun.COM> <4905EE5D.8030705@Sun.COM> User-Agent: Thunderbird 2.0.0.16 (X11/20080922) Status: RO Content-Length: 1288 Darren J Moffat wrote: > Tim Haley wrote: >> PROPOSED SOLUTION: >> >> Introduce a "passthrough-x" property value for the "aclinherit" >> property. The ACE_EXECUTE permission will only be inherited for >> ACEs that affect the mode (owner@, group@, and everyone@) if >> an execute bit is set in the file creation mode. This behavior >> is only for files, directories continue to inherit ACLs as >> specified in PSARC/2008/231. > > Any reason to have another aclinherit value here rather than just > redefining passthrough from 2008/231 to have the behaviour from this > case ? Basically is there actually perceived benefit in having both > passthrough and passthrough-x given all the other capabilities of ACL > inheritance and the ability to control execution using the 'exec' > property ? > > Has 2008/231 actually shipped in a patch (Solaris 10) update release? > 2008/231 will be in s10u6 and there is an IDR out there already for s10u5. Not sure if it ever became an official patch, though. Just seemed simpler to allow "passthrough" to remain as is for those who always want to force the mode exactly as in the inherited ACEs, and provide "passthrough-x" for those environments that want to optionally inherit 'x' when necessary. -Mark From Darren.Moffat@sun.com Mon Oct 27 09:46:37 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m9RGkaWY010807 for ; Mon, 27 Oct 2008 09:46:36 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m9RGkZq4035831; Mon, 27 Oct 2008 10:46:36 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9E00L01P9MQ000@nwk-avmta-1.sfbay.Sun.COM>; Mon, 27 Oct 2008 09:46:34 -0700 (PDT) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9E009ULP9KZK70@nwk-avmta-1.sfbay.Sun.COM>; Mon, 27 Oct 2008 09:46:33 -0700 (PDT) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10]) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m9RGkWxY025362; Mon, 27 Oct 2008 16:46:32 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9E00G01OR3LM00@fe-emea-09.sun.com> (original mail from Darren.Moffat@Sun.COM); Mon, 27 Oct 2008 16:46:32 +0000 (GMT) Received: from [129.156.173.21] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9E00M7PP96T550@fe-emea-09.sun.com>; Mon, 27 Oct 2008 16:46:19 +0000 (GMT) Date: Mon, 27 Oct 2008 16:46:18 +0000 From: Darren J Moffat Subject: Re: New ZFS "passthrough-x" ACL inheritance rules [PSARC/2008/659 FastTrack timeout 11/03/2008] In-reply-to: <4905EF3B.9030709@Sun.COM> Sender: Darren.Moffat@sun.com To: Mark Shellenbaum Cc: Tim Haley , PSARC-ext@sun.com, henson@acm.org, zfs-team@sun.com Message-id: <4905F05A.4070801@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200810271619.m9RGJu4B018632@spidey.Central.Sun.COM> <4905EE5D.8030705@Sun.COM> <4905EF3B.9030709@Sun.COM> User-Agent: Thunderbird 2.0.0.16 (X11/20080922) Status: RO Content-Length: 1430 Mark Shellenbaum wrote: > Darren J Moffat wrote: >> Tim Haley wrote: >>> PROPOSED SOLUTION: >>> >>> Introduce a "passthrough-x" property value for the "aclinherit" >>> property. The ACE_EXECUTE permission will only be inherited for >>> ACEs that affect the mode (owner@, group@, and everyone@) if >>> an execute bit is set in the file creation mode. This behavior >>> is only for files, directories continue to inherit ACLs as >>> specified in PSARC/2008/231. >> >> Any reason to have another aclinherit value here rather than just >> redefining passthrough from 2008/231 to have the behaviour from this >> case ? Basically is there actually perceived benefit in having both >> passthrough and passthrough-x given all the other capabilities of ACL >> inheritance and the ability to control execution using the 'exec' >> property ? >> >> Has 2008/231 actually shipped in a patch (Solaris 10) update release? >> > > 2008/231 will be in s10u6 and there is an IDR out there already for > s10u5. Not sure if it ever became an official patch, though. So basically past the point of no return :-) > Just seemed simpler to allow "passthrough" to remain as is for those who > always want to force the mode exactly as in the inherited ACEs, and > provide "passthrough-x" for those environments that want to optionally > inherit 'x' when necessary. Okay, I'm happy with that. -- Darren J Moffat From henson@acm.org Mon Oct 27 16:03:55 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m9RN3tvq026670 for ; Mon, 27 Oct 2008 16:03:55 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m9RN3qdR032201; Mon, 27 Oct 2008 17:03:53 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9F00F076QGNH00@nwk-avmta-1.sfbay.Sun.COM>; Mon, 27 Oct 2008 16:03:52 -0700 (PDT) Received: from brmea-mail-3.sun.com ([192.18.98.34]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9F009EQ6QFT240@nwk-avmta-1.sfbay.Sun.COM>; Mon, 27 Oct 2008 16:03:51 -0700 (PDT) Received: from relay17i.sun.com (ip127.net129179-4.block1.us.syntegra.com [129.179.4.127]) by brmea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m9RMxd3A002072; Mon, 27 Oct 2008 23:03:50 +0000 (GMT) Received: from mmp11es.mmp.us.syntegra.com ([160.41.208.11] [160.41.208.11]) by relay17i.sun.com with ESMTP id BT-MMP-7436; Mon, 27 Oct 2008 23:03:50 +0000 (Z) Received: from relay17i.sun.com (relay17i.sun.com [129.179.4.127]) by mmp11es.mmp.us.syntegra.com with ESMTP id BT-MMP-216788; Mon, 27 Oct 2008 23:03:50 +0000 (Z) Received: from sparky.unx.csupomona.edu ([134.71.247.19] [134.71.247.19]) by relay1ib.sun.com with ESMTP id BT-MMP-169746; Mon, 27 Oct 2008 23:03:50 +0000 (Z) Received: from localhost (localhost [127.0.0.1]) by sparky.unx.csupomona.edu (Postfix) with ESMTP id CDF76DC0BC; Mon, 27 Oct 2008 16:03:49 -0700 (PDT) Received: from sparky.unx.csupomona.edu ([127.0.0.1]) by localhost (sparky.unx.csupomona.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6YKbA564F652; Mon, 27 Oct 2008 16:03:49 -0700 (PDT) Received: from loogie.intranet.csupomona.edu (loogie.intranet.csupomona.edu [134.71.184.48]) (using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits)) (No client certificate requested) by sparky.unx.csupomona.edu (Postfix) with ESMTP id 8DC55DC096; Mon, 27 Oct 2008 16:03:49 -0700 (PDT) Date: Mon, 27 Oct 2008 15:03:48 -0800 (PST) From: "Paul B. Henson" Subject: Re: New ZFS "passthrough-x" ACL inheritance rules [PSARC/2008/659 FastTrack timeout 11/03/2008] In-reply-to: <4905EF3B.9030709@Sun.COM> X-X-Sender: henson@loogie.intranet.csupomona.edu To: Mark Shellenbaum Cc: Darren J Moffat , Tim Haley , PSARC-ext@sun.com, zfs-team@sun.com Message-id: MIME-version: 1.0 Content-type: TEXT/PLAIN; charset=US-ASCII Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Brightmail-Tracker: AAAAAA== X-Virus-Scanned: amavisd-new at csupomona.edu X-Antispam: No, score=0.0/5.0, scanned in 0.223sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ References: <200810271619.m9RGJu4B018632@spidey.Central.Sun.COM> <4905EE5D.8030705@Sun.COM> <4905EF3B.9030709@Sun.COM> Status: RO Content-Length: 808 On Mon, 27 Oct 2008, Mark Shellenbaum wrote: > 2008/231 will be in s10u6 and there is an IDR out there already for > s10u5. Not sure if it ever became an official patch, though. I think I'm the only one with an IDR... I told them I could wait for U6 for the official patch, although that was back when it was due August-ish ;)... In a way, I think this kind of completes the previous work, in that it allows inherited ACL's to do the right thing with execute bits. Redefining the new passthrough to include it would work for me, but I'd rather have it sooner named passthrough-x than later... Thanks... -- Paul B. Henson | (909) 979-6361 | http://www.csupomona.edu/~henson/ Operating Systems and Network Analyst | henson@csupomona.edu California State Polytechnic University | Pomona CA 91768 From tim.haley@sun.com Wed Oct 29 10:34:28 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m9THYRIu016902 for ; Wed, 29 Oct 2008 10:34:28 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m9THYOfO023105 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 29 Oct 2008 17:34:26 GMT Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9I0080RGTCRU00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Wed, 29 Oct 2008 11:34:24 -0600 (MDT) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9I007UHGTB3O20@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Wed, 29 Oct 2008 11:34:23 -0600 (MDT) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m9THYNdp001902 for ; Wed, 29 Oct 2008 17:34:23 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9I00G01EGVQK00@mail-amer.sun.com> (original mail from tim.haley@sun.com) for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Wed, 29 Oct 2008 11:34:23 -0600 (MDT) Received: from [172.20.25.27] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9I005AOGT1PP20@mail-amer.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Wed, 29 Oct 2008 11:34:17 -0600 (MDT) Date: Wed, 29 Oct 2008 11:32:24 -0600 From: Tim Haley Subject: Re: New ZFS "passthrough-x" ACL inheritance rules [PSARC/2008/659] In-reply-to: <200810271619.m9RGJu4B018632@spidey.Central.Sun.COM> Sender: Timothy.Haley@sun.com To: PSARC-ext@sun.com Message-id: <49089E28.3000700@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200810271619.m9RGJu4B018632@spidey.Central.Sun.COM> User-Agent: Thunderbird 2.0.0.16 (X11/20080922) Status: RO Content-Length: 56 This case was approved in today's PSARC meeting. -tim