From Tim.Haley@sun.com Tue Jan 26 09:26:17 2010 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o0QHQH7v027746 for ; Tue, 26 Jan 2010 09:26:17 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o0QHQGaR000780; Tue, 26 Jan 2010 09:26:16 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KWV00F2R73SP300@brm-avmta-1.central.sun.com>; Tue, 26 Jan 2010 10:26:16 -0700 (MST) Received: from dm-central-01.central.sun.com ([129.147.62.4]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KWV000Y473RJBD0@brm-avmta-1.central.sun.com>; Tue, 26 Jan 2010 10:26:15 -0700 (MST) Received: from spidey.local (spidey.Central.Sun.COM [172.20.25.27]) by dm-central-01.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id o0QHQFk1012605; Tue, 26 Jan 2010 10:26:15 -0700 (MST) Received: from spidey.local (localhost [127.0.0.1]) by spidey.local (8.14.3+Sun/8.14.3) with ESMTP id o0QHJrpj011656; Tue, 26 Jan 2010 10:19:53 -0700 (MST) Received: (from timh@localhost) by spidey.local (8.14.3+Sun/8.14.3/Submit) id o0QHJrva011655; Tue, 26 Jan 2010 10:19:53 -0700 (MST) Date: Tue, 26 Jan 2010 10:19:53 -0700 (MST) From: Tim Haley Subject: Improved ACL interoperability [PSARC/2010/029 FastTrack timeout 02/02/2010] To: PSARC-ext@sun.com Cc: cifs-eng@sun.com, zfs-team@sun.com Message-id: <201001261719.o0QHJrva011655@spidey.local> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 10331 I am sponsoring the following fasttrack for Mark Shellenbaum. This case modifies the behavior of ZFS acls to improve the interoperability story when ZFS file systems are shared using NFS and CIFS. The case seeks micro/patch binding. Timeout is 2/2/2010. Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI This information is Copyright 2010 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: Improved ACL interoperability 1.2. Name of Document Author/Supplier: Author: Mark Shellenbaum 1.3 Date of This Document: 26 January, 2010 4. Technical Description Executive Summary: This case changes the default behavior of ACLs for CIFS and NFS so that it is easier to understand with *fewer* configuration knobs. The new default behavior remains POSIX compliant and is more in line with the expectation of CIFS users, local ZFS users, and NFS users. This case does not introduce any changes that would cause files to have more permissable access than the previous behavior. Problems: A number of issues have turned up with trying to do cross protocol (NFS/CIFS) sharing of ZFS file systems. - Deny ACES in standard trivial ACLs cause issues for the Windows ACL GUI, which then results in ACLs being resorted and the access to the file changed. - ZFS computes a mode based on the presence of the owner@, group@ and everyone@ ACES. The Solaris CIFS server usually creates files that only have a user and group ACE and no owner@, group@ or everyone@ entries. This is because Windows has no knowledge of owner@ and group@ ACEs. Those are NFSv4 extensions. This results in files being created with a mode of zero and that confuses customers. - chmod(2) behavior under ZFS has caused a lot of confusion among customers. ZFS tries to preserve ACLs during chmod(2) and this often causes the ACL to change in a very non-intuitive way and results in a constant stream of questions on multiple mailing lists. The chmod(2) behavior also gives the Windows ACL GUI issues due to the insertion of deny ACEs. Solutions: - ZFS can create trivial ACLs that don't require deny ACEs for all but unusual permissions. For example a mode of 0644, 0755, 0664 do not need deny ACEs, but modes, such as 0705, 0060 and so on, will require deny ACEs. Examples of the new layout are described later in this document. - Inheritance changes. ZFS "splits" ACEs into multiple ACES during inheritance to try to preserve the original permission unmodified. It does this by creating a "inherit_only" ACE. This has been a point of confusion with customers who don't understand where the "inherit_only" ACE came from. The solution is to stop doing the "splitting" operation and just modify the permissions as necessary to enforce the mode of file create. - The semantics of the "aclinherit" property will change to include "trimming" down permissions when the property is set to "restricted". The effect of this will be the same as what the old "aclmode" property would do when set to "groupmask", except that it won't be doing the ACE splitting described above. - ZFS appears to be the only file system supporting NFSv4 ACLs that attempts to preserve ACLs during chmod(2) operations. Unfortunately, this requires the ACL to be modified in ways that are confusing to customers and the time has come to stop the confusion and to just "discard" the ACL during chmod(2) operations. This implies that the ZFS aclmode property will no longer be needed and will be removed from ZFS. - New mode calculation rules. If an ACL has a "user" ACE that is also the file owner, then those permissions will be included in the computation of the mode. The same is also true if a "group" ACE is the group owner of the file. New ACE Layout Examples File with a mode of 0644: -rw-r--r-- 1 root staff 5 Dec 9 13:18 file.1 owner@:rw-p--aARWcCos:-------:allow group@:r-----a-R-c--s:-------:allow everyone@:r-----a-R-c--s:-------:allow File with a mode of 0777: -rwxrwxrwx 1 root staff 5 Dec 9 13:18 file.1 owner@:rwxp--aARWcCos:-------:allow group@:rwxp--a-R-c--s:-------:allow everyone@:rwxp--a-R-c--s:-------:allow File with a mode of 0466: -r--rw-rw- 1 root staff 5 Dec 9 13:18 file.1 owner@:-w------------:-------:deny owner@:r-----aARWcCos:-------:allow group@:rw-p--a-R-c--s:-------:allow everyone@:rw-p--a-R-c--s:-------:allow Deny entry is required to prevent owner from picking up write permission from the group@ or everyone@ entry. File with a mode of 0447: -r--r--rwx 1 root staff 5 Dec 9 13:18 file.1 owner@:-wx-----------:-------:deny group@:-wx-----------:-------:deny owner@:r-----aARWcCos:-------:allow group@:r-----a-R-c--s:-------:allow everyone@:rwxp--a-R-c--s:-------:allow Deny entries are needed for both owner@ and group@ entries to prevent the owner or group owner from picking up write/execute permission from the everyone@ entry. File with a mode of 0707: -rwx---rwx 1 root staff 5 Dec 9 13:18 file.1 owner@:rwx-----------:-------:allow group@:rwx-----------:-------:deny owner@:rwxp--aARWcCos:-------:allow group@:------a-R-c--s:-------:allow everyone@:rwxp--a-R-c--s:-------:allow The owner@ allow entry is needed to prevent the group@ deny entry from taking the owners read/write/execute permission away. ACE Inheritance Parent directory has the following ACL: drwxr-xr-x+ 2 root root 2 Dec 9 14:18 dir.1 user:marks:rwxp----------:fd-----:allow owner@:rwxp--aARWcCos:-------:allow group@:r-x---a-R-c--s:-------:allow everyone@:r-x---a-R-c--s:-------:allow A simple file create in directory dir.1 will result in the following ACL: # touch file.1 # ls -V file.1 -rw-r--r--+ 1 root root 0 Dec 9 14:20 file.1 user:marks:r-------------:------I:allow owner@:rw-p--aARWcCos:-------:allow group@:r-----a-R-c--s:-------:allow everyone@:r-----a-R-c--s:-------:allow The inherited ACE for marks was reduced to be no greater than the group permissions because the "aclmode" property is set to "restricted." If the "aclinherit" property was set to "passthrough" then the inherited permissions for "marks" would have been "rwxp." Now, lets create a directory. # mkdir dir.2 # ls -dV dir.2 drwxr-xr-x+ 2 root root 2 Dec 9 14:21 dir.2 user:marks:r-x-----------:fd----I:allow owner@:rwxp--aARWcCos:-------:allow group@:r-x---a-R-c--s:-------:allow everyone@:r-x---a-R-c--s:-------:allow The inherited ACE for 'marks' was reduced to be no greater than the group permissions because the "aclinherit" property is set to "restricted." With the aclinherit property set to passthrough the full ACE permissions are inherited as follows: # touch file.2 # ls -V file.2 -rw-r--r--+ 1 root root 0 Dec 9 14:24 file.2 user:marks:rwxp----------:------I:allow owner@:rw-p--aARWcCos:-------:allow group@:r-----a-R-c--s:-------:allow everyone@:r-----a-R-c--s:-------:allow Chmod Behavior The new chmod behavior is to always "discard" the ACL and replace it with a new ACL that represents the new mode as specified to the chmod(2) syscall. # ls -V file.2 -rw-r--r--+ 1 root root 0 Dec 9 14:24 file.2 user:marks:rwxp----------:------I:allow owner@:rw-p--aARWcCos:-------:allow group@:r-----a-R-c--s:-------:allow everyone@:r-----a-R-c--s:-------:allow # chmod 640 file.2 # ls -V file.2 -rw-r----- 1 root root 0 Dec 9 14:24 file.2 owner@:rw-p--aARWcCos:-------:allow group@:r-----a-R-c--s:-------:allow everyone@:------a-R-c--s:-------:allow Mode Computation Example -rwxr-----+ 1 marks staff 0 Dec 9 14:24 file.2 user:marks:rwxpdDaARWcCos:-------:allow group:staff:r-----a-R-c---:-------:allow The mode in this example is 740 because the user "marks" is the owner of the file and "marks" is also a member of group staff. Previously, only owner@, group@ or everyone@ are considered in the mode computation, but if a "user" or "group" ACE is the file owner or file group owner then those will be used in additional to the owner@, group@ and everyone@ entries. Man Page diffs 0,58d39 < < aclmode=discard | groupmask | passthrough < < Controls how an ACL is modified during chmod(2). A file < system with an aclmode property of discard deletes all < ACL entries that do not represent the mode of the file. < An aclmode property of groupmask (the default) reduces < user or group permissions. The permissions are reduced, < such that they are no greater than the group permission < bits, unless it is a user entry that has the same UID as < the owner of the file or directory. In this case, the < ACL permissions are reduced so that they are no greater < than owner permission bits. A file system with an < aclmode property of passthrough indicates that no < changes are made to the ACL other than generating the < necessary ACL entries to represent the new mode of the < file or directory. < < 2056d2036 < aclmode property 2374d2353 < pool/home/bob aclmode groupmask default 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From Darren.Moffat@sun.com Tue Jan 26 09:37:18 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o0QHbIJs027913 for ; Tue, 26 Jan 2010 09:37:18 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o0QHbFxC025641; Tue, 26 Jan 2010 11:37:17 -0600 (CST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KWV00H377M5FP00@nwk-avmta-1.sfbay.Sun.COM>; Tue, 26 Jan 2010 09:37:17 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KWV00FSN7M38B20@nwk-avmta-1.sfbay.Sun.COM>; Tue, 26 Jan 2010 09:37:16 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id o0QHbFt1015931; Tue, 26 Jan 2010 17:37:15 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KWV00C00541PY00@fe-emea-10.sun.com>; Tue, 26 Jan 2010 17:37:07 +0000 (GMT) Received: from [192.168.1.105] (cpc2-rdng20-2-0-cust917.15-3.cable.virginmedia.com [86.28.167.150]) by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KWV0098H7LPXIA0@fe-emea-10.sun.com>; Tue, 26 Jan 2010 17:37:02 +0000 (GMT) Date: Tue, 26 Jan 2010 17:37:01 +0000 From: Darren J Moffat Subject: Re: Improved ACL interoperability [PSARC/2010/029 FastTrack timeout 02/02/2010] In-reply-to: <201001261719.o0QHJrva011655@spidey.local> Sender: Darren.Moffat@sun.com To: Tim Haley Cc: PSARC-ext@sun.com, cifs-eng@sun.com, zfs-team@sun.com Message-id: <4B5F283D.8000100@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <201001261719.o0QHJrva011655@spidey.local> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.5) Gecko/20100103 Lightning/1.0b1 Thunderbird/3.0 Status: RO Content-Length: 549 This all makes perfect sense to me and will assist user understanding and interoperability. I think the only real visible change for most people is that chmod(2) with "traditional" unix perms will remove the ACL. That might be surprising in some cases, but I can't at the current time think of any applications that would depend on using chmod(2) while preserving an ACL - since most apps don't know about ACLs and most apps (rather than code system utils) don't call chmod(2). So I'm happy with this and it gets my +1. -- Darren J Moffat From Scott.Rotondo@sun.com Tue Jan 26 11:46:59 2010 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o0QJkxZM000554 for ; Tue, 26 Jan 2010 11:46:59 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o0QJkumX027064; Tue, 26 Jan 2010 11:46:58 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KWV00601DMAO900@brm-avmta-1.central.sun.com>; Tue, 26 Jan 2010 12:46:58 -0700 (MST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KWV00IEPDMA2CC0@brm-avmta-1.central.sun.com>; Tue, 26 Jan 2010 12:46:58 -0700 (MST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o0QJkwAw016792; Tue, 26 Jan 2010 19:46:58 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KWV00L00CPO9400@mail-amer.sun.com>; Tue, 26 Jan 2010 12:46:58 -0700 (MST) Received: from [129.146.108.62] ([unknown] [129.146.108.62]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KWV00HS1DM9IU20@mail-amer.sun.com>; Tue, 26 Jan 2010 12:46:58 -0700 (MST) Date: Tue, 26 Jan 2010 11:46:57 -0800 From: Scott Rotondo Subject: Re: Improved ACL interoperability [PSARC/2010/029 FastTrack timeout 02/02/2010] In-reply-to: <201001261719.o0QHJrva011655@spidey.local> Sender: Scott.Rotondo@sun.com To: Tim Haley Cc: PSARC-ext@sun.com, cifs-eng@sun.com, zfs-team@sun.com Message-id: <4B5F46B1.7070607@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <201001261719.o0QHJrva011655@spidey.local> User-Agent: Thunderbird 2.0.0.21 (X11/20090323) Status: RO Content-Length: 1387 Tim Haley wrote: > File with a mode of 0466: > > -r--rw-rw- 1 root staff 5 Dec 9 13:18 file.1 > owner@:-w------------:-------:deny > owner@:r-----aARWcCos:-------:allow > group@:rw-p--a-R-c--s:-------:allow > everyone@:rw-p--a-R-c--s:-------:allow > > Deny entry is required to prevent owner from picking up write > permission from the group@ or everyone@ entry. > > File with a mode of 0447: > > -r--r--rwx 1 root staff 5 Dec 9 13:18 file.1 > owner@:-wx-----------:-------:deny > group@:-wx-----------:-------:deny > owner@:r-----aARWcCos:-------:allow > group@:r-----a-R-c--s:-------:allow > everyone@:rwxp--a-R-c--s:-------:allow > > Deny entries are needed for both owner@ and group@ entries to prevent > the owner or group owner from picking up write/execute permission > from the everyone@ entry. Just to confirm, the examples above are the same regardless of whether or not the owner is a member of the group, right? [Even if the owner is not a group member at the time that the ACE's are created, he could be in the future.] Scott -- Scott Rotondo Principal Engineer, Solaris Security Technologies President, Trusted Computing Group Phone/FAX: +1 408 850 3655 (Internal x68278) From Mark.Shellenbaum@sun.com Tue Jan 26 11:53:51 2010 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o0QJrpu2000657 for ; Tue, 26 Jan 2010 11:53:51 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o0QJrjk7000731; Tue, 26 Jan 2010 11:53:50 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KWV0071DDXQA500@brm-avmta-1.central.sun.com>; Tue, 26 Jan 2010 12:53:50 -0700 (MST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KWV00IQ9DXP2JB0@brm-avmta-1.central.sun.com>; Tue, 26 Jan 2010 12:53:49 -0700 (MST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o0QJrn7g019817; Tue, 26 Jan 2010 19:53:49 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KWV00A00DSP1X00@mail-amer.sun.com>; Tue, 26 Jan 2010 12:53:49 -0700 (MST) Received: from [172.20.24.112] ([unknown] [172.20.24.112]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KWV00HSSDXMIU50@mail-amer.sun.com>; Tue, 26 Jan 2010 12:53:46 -0700 (MST) Date: Tue, 26 Jan 2010 12:54:26 -0700 From: Mark Shellenbaum Subject: Re: Improved ACL interoperability [PSARC/2010/029 FastTrack timeout 02/02/2010] In-reply-to: <4B5F46B1.7070607@sun.com> Sender: Mark.Shellenbaum@sun.com To: Scott Rotondo Cc: Tim Haley , PSARC-ext@sun.com, cifs-eng@sun.com, zfs-team@sun.com Message-id: <4B5F4872.7080306@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <201001261719.o0QHJrva011655@spidey.local> <4B5F46B1.7070607@sun.com> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.5) Gecko/20100103 Thunderbird/3.0 Status: RO Content-Length: 1130 On 01/26/10 12:46 PM, Scott Rotondo wrote: > Tim Haley wrote: >> File with a mode of 0466: >> >> -r--rw-rw- 1 root staff 5 Dec 9 13:18 file.1 >> owner@:-w------------:-------:deny >> owner@:r-----aARWcCos:-------:allow >> group@:rw-p--a-R-c--s:-------:allow >> everyone@:rw-p--a-R-c--s:-------:allow >> >> Deny entry is required to prevent owner from picking up write >> permission from the group@ or everyone@ entry. >> >> File with a mode of 0447: >> >> -r--r--rwx 1 root staff 5 Dec 9 13:18 file.1 >> owner@:-wx-----------:-------:deny >> group@:-wx-----------:-------:deny >> owner@:r-----aARWcCos:-------:allow >> group@:r-----a-R-c--s:-------:allow >> everyone@:rwxp--a-R-c--s:-------:allow >> >> Deny entries are needed for both owner@ and group@ entries to prevent >> the owner or group owner from picking up write/execute permission >> from the everyone@ entry. > > Just to confirm, the examples above are the same regardless of whether > or not the owner is a member of the group, right? [Even if the owner is > not a group member at the time that the ACE's are created, he could be > in the future.] > Yes > Scott > From Nicolas.Williams@sun.com Tue Jan 26 12:11:26 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o0QKBQe0001401 for ; Tue, 26 Jan 2010 12:11:26 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o0QKBIUk019585; Tue, 26 Jan 2010 14:11:25 -0600 (CST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KWV00903EQW1A00@brm-avmta-1.central.sun.com>; Tue, 26 Jan 2010 13:11:20 -0700 (MST) Received: from binky.Central.Sun.COM ([129.153.128.104]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KWV00ISHEQW2GB0@brm-avmta-1.central.sun.com>; Tue, 26 Jan 2010 13:11:20 -0700 (MST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3) with ESMTP id o0QKBKlt017154; Tue, 26 Jan 2010 14:11:20 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.3+Sun/8.14.3/Submit) id o0QKBKK7017153; Tue, 26 Jan 2010 14:11:20 -0600 (CST) Date: Tue, 26 Jan 2010 14:11:20 -0600 From: Nicolas Williams Subject: Re: Improved ACL interoperability [PSARC/2010/029 FastTrack timeout 02/02/2010] In-reply-to: <201001261719.o0QHJrva011655@spidey.local> To: Tim Haley Cc: PSARC-ext@sun.com, cifs-eng@sun.com, zfs-team@sun.com Message-id: <20100126201120.GD1061@Sun.COM> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.4.1.325704 References: <201001261719.o0QHJrva011655@spidey.local> X-Authentication-warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f User-Agent: Mutt/1.5.7i Status: RO Content-Length: 245 Presumably in aclinherit=passthrough-x mode if the new ACL has no @owner/@group ACEs but has ACEs for the file's owner/group then the requested mode_t will be applied to those ACEs? Or is aclinherit=passthrough-x mode left unchanged? Nico -- From Mark.Shellenbaum@sun.com Tue Jan 26 12:27:35 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o0QKRZsi001614 for ; Tue, 26 Jan 2010 12:27:35 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o0QKRXTl029851; Tue, 26 Jan 2010 14:27:34 -0600 (CST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KWV00507FHXS400@nwk-avmta-2.sfbay.sun.com>; Tue, 26 Jan 2010 12:27:33 -0800 (PST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KWV001AKFHXJ160@nwk-avmta-2.sfbay.sun.com>; Tue, 26 Jan 2010 12:27:33 -0800 (PST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o0QKRXJ4005119; Tue, 26 Jan 2010 20:27:33 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KWV00000ESTUO00@mail-amer.sun.com>; Tue, 26 Jan 2010 13:27:33 -0700 (MST) Received: from [172.20.24.112] ([unknown] [172.20.24.112]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KWV00HCDFHWIUD0@mail-amer.sun.com>; Tue, 26 Jan 2010 13:27:32 -0700 (MST) Date: Tue, 26 Jan 2010 13:28:12 -0700 From: Mark Shellenbaum Subject: Re: Improved ACL interoperability [PSARC/2010/029 FastTrack timeout 02/02/2010] In-reply-to: <20100126201120.GD1061@Sun.COM> Sender: Mark.Shellenbaum@sun.com To: Nicolas Williams Cc: Tim Haley , PSARC-ext@sun.com, cifs-eng@sun.com, zfs-team@sun.com Message-id: <4B5F505C.8060900@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <201001261719.o0QHJrva011655@spidey.local> <20100126201120.GD1061@Sun.COM> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.5) Gecko/20100103 Thunderbird/3.0 Status: RO Content-Length: 445 On 01/26/10 01:11 PM, Nicolas Williams wrote: > Presumably in aclinherit=passthrough-x mode if the new ACL has no > @owner/@group ACEs but has ACEs for the file's owner/group then the > requested mode_t will be applied to those ACEs? Or is > aclinherit=passthrough-x mode left unchanged? > > Nico Yes, owner@/group@/everyone@ ACEs will need to be appended if no owner@/group@/everyone@ ACEs are being inherited and passthrough-x is enabled. From glenn.skinner@covad.net Tue Jan 26 12:57:35 2010 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o0QKvZRh002888 for ; Tue, 26 Jan 2010 12:57:35 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id o0QKvYcp002642; Tue, 26 Jan 2010 13:57:35 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KWV00I0BGVYV600@nwk-avmta-1.sfbay.Sun.COM>; Tue, 26 Jan 2010 12:57:34 -0800 (PST) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KWV006FJGVYIP60@nwk-avmta-1.sfbay.Sun.COM>; Tue, 26 Jan 2010 12:57:34 -0800 (PST) Received: from relay15i.sun.com (ip125.net129179-4.block1.us.syntegra.com [129.179.4.125]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o0QKvG02017542; Tue, 26 Jan 2010 20:57:33 +0000 (GMT) Received: from mmp11es.mmp.us.syntegra.com ([160.41.208.11] [160.41.208.11]) by relay15i.sun.com with ESMTP id BT-MMP-1426296; Tue, 26 Jan 2010 20:57:33 +0000 (Z) Received: from relay13i.sun.com (relay13i.sun.com [129.179.4.123]) by mmp11es.mmp.us.syntegra.com with ESMTP id BT-MMP-18040796; Tue, 26 Jan 2010 20:57:33 +0000 (Z) Received: from mail156c8.megamailservers.com ([209.235.129.66] [209.235.129.66]) by relay1i.sun.com with ESMTP id BT-MMP-3214551; Tue, 26 Jan 2010 20:57:33 +0000 (Z) Received: from [192.168.1.106] (h-64-105-36-23.snvacaid.static.covad.net [64.105.36.23]) by mail156c8.megamailservers.com (8.13.6/8.13.1) with ESMTP id o0QKvRaJ032104; Tue, 26 Jan 2010 15:57:29 -0500 Date: Tue, 26 Jan 2010 12:57:27 -0800 From: Glenn Skinner Subject: Re: Improved ACL interoperability [PSARC/2010/029 FastTrack timeout 02/02/2010] In-reply-to: <201001261719.o0QHJrva011655@spidey.local> To: Tim Haley Cc: PSARC-ext@sun.com, zfs-team@sun.com, cifs-eng@sun.com Message-id: <29FF43D5-6E67-4E39-B5BE-476755F1EB18@covad.net> MIME-version: 1.0 X-Mailer: Apple Mail (2.936) Content-type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Brightmail-Tracker: AAAAAA== X-POP-User: dbclispr@covad.net X-Antispam: No, score=3.2/5.0, scanned in 0.089sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ References: <201001261719.o0QHJrva011655@spidey.local> Status: RO Content-Length: 1168 On Jan 26, 2010, at 9:19 AM, Tim Haley wrote: ... > ACE Inheritance > > Parent directory has the following ACL: > > drwxr-xr-x+ 2 root root 2 Dec 9 14:18 dir.1 > user:marks:rwxp----------:fd-----:allow > owner@:rwxp--aARWcCos:-------:allow > group@:r-x---a-R-c--s:-------:allow > everyone@:r-x---a-R-c--s:-------:allow > > A simple file create in directory dir.1 will result in the > following ACL: > > # touch file.1 > # ls -V file.1 > -rw-r--r--+ 1 root root 0 Dec 9 14:20 file.1 > user:marks:r-------------:------I:allow > owner@:rw-p--aARWcCos:-------:allow > group@:r-----a-R-c--s:-------:allow > everyone@:r-----a-R-c--s:-------:allow > > The inherited ACE for marks was reduced to be no greater than the > group > permissions because the "aclmode" property is set to "restricted." > If the "aclinherit" property was set to "passthrough" then the > inherited > permissions for "marks" would have been "rwxp." A nit: "aclmode" in the text quoted above should be "aclinherit", right? -- Glenn From tim.haley@sun.com Wed Feb 3 10:14:25 2010 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id o13IEOJQ019907 for ; Wed, 3 Feb 2010 10:14:25 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id o13IEKfb002227; Wed, 3 Feb 2010 12:14:24 -0600 (CST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KXA0000J2NZBB00@nwk-avmta-2.sfbay.sun.com>; Wed, 03 Feb 2010 10:14:23 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KXA00MPS2NZN920@nwk-avmta-2.sfbay.sun.com>; Wed, 03 Feb 2010 10:14:23 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id o13IEM6C007403; Wed, 03 Feb 2010 18:14:22 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KXA00D002BDH200@mail-amer.sun.com>; Wed, 03 Feb 2010 11:14:22 -0700 (MST) Received: from [172.20.25.27] ([unknown] [172.20.25.27]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KXA0033U2NWHG00@mail-amer.sun.com>; Wed, 03 Feb 2010 11:14:21 -0700 (MST) Date: Wed, 03 Feb 2010 11:14:20 -0700 From: Tim Haley Subject: Re: Improved ACL interoperability [PSARC/2010/029 FastTrack timeout 02/02/2010] In-reply-to: <201001261719.o0QHJrva011655@spidey.local> Sender: timothy.haley@sun.com To: PSARC-ext@sun.com Cc: cifs-eng@sun.com, zfs-team@sun.com Message-id: <4B69BCFC.8010809@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <201001261719.o0QHJrva011655@spidey.local> User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.9.1.5) Gecko/20100117 Thunderbird/3.0 Status: RO Content-Length: 50 This case was approved in today's meeting. -tim