mirror of
https://git.openafs.org/openafs.git
synced 2025-01-18 15:00:12 +00:00
26f1504915
Permissions granted by host-based ACLs and non-host-based ACLs are calculated separately (and transmitted somewhat differently, via AnonymousAccess). So, if a caller is granted permissions via normal user-based access, those permissions cannot be removed by host-based entries in a negative ACL. And conversely, permissions granted by host-based entries cannot be removed by negative ACLs for non-host-based entries. Both negative ACLs and host-based ACLs are uncommon and recommended against, so this should not be a common combination. But this limitation is not documented anywhere, so try to mention it in the fs_setacl manpage, near some other text related to negative ACLs, to give affected users a chance to figure out why it isn't working. Change-Id: I13ba2adda1474a5e72271d3e843bb03feec29b67 Reviewed-on: https://gerrit.openafs.org/15340 Tested-by: BuildBot <buildbot@rampaginggeek.com> Reviewed-by: Michael Meffie <mmeffie@sinenomine.net> Reviewed-by: Benjamin Kaduk <kaduk@mit.edu> |
||
|---|---|---|
| .. | ||
| doxygen | ||
| man-pages | ||
| protocol | ||
| txt | ||
| xml | ||
| LICENSE | ||
| README | ||
What's in the "doc" subdirectory ** doc/man-pages pod sources for man pages (converted from original IBM html source). ** doc/xml xml sources for manuals (converted from original IBM html source). Note: The doc/xml/AdminRef uses doc/xml/AdminRef/pod2refentry to convert the pod man pages to xml for printing. pod goes directly to html just fine. ** doc/pdf Old Transarc (and possibly pre-Transarc) protocol and API documentation for which we have no other source. ** doc/txt Technical notes, Windows notes, and examples. ** doc/doxygen Configuration files for the doxygen tool to generate documentation from the annotated sources. See the 'dox' Makefile target in the top level Makefile.