From: Vikram Noel Ambrose <noel.ambrose@gmail.com>
To: Jim Meyering <jim@meyering.net>
Cc: bug-coreutils@gnu.org, selinux@tycho.nsa.gov,
472590@bugs.debian.org, "Ondřej Vašík" <ovasik@redhat.com>
Subject: Re: RFC: changing the "+" in ls -l output to be "." or "+"
Date: Thu, 23 Oct 2008 23:18:58 -0400 [thread overview]
Message-ID: <49013EA2.8070301@gmail.com> (raw)
In-Reply-To: <8763njqz9a.fsf@rho.meyering.net>
Jim Meyering <jim@meyering.net> wrote:
>>> [ I'm Cc'ing bug-coreutils@gnu.org.
>>> FYI, this is a continuation of discussion from the SELinux list:
>>> http://marc.info/?t=120645074000003&r=1&w=2
>>> and the debian bug tracking system: http://bugs.debian.org/472590
>>>
>>> The problem is that on an SELinux-enabled system, 'ls -l's "+",
>>> the "alternate access method" indicator, is useless, because it
>>> appears on every file:
>>>
>>> $ ls -glo /var
>>> total 164
>>> drwxr-xr-x+ 3 4096 2008-03-29 08:43 kerberos
>>> drwxr-xr-x+ 39 4096 2008-03-29 08:43 lib
>>> drwxr-xr-x+ 2 4096 2008-03-27 17:33 local
>>> drwxrwxr-x+ 8 4096 2008-03-31 04:15 lock
>>> drwxr-xr-x+ 20 4096 2008-03-31 09:55 log
>>> lrwxrwxrwx+ 1 10 2008-03-28 23:33 mail -> spool/mail
>>> ...
>>>
>>> Newer POSIX allows any non-space character as the indicator, and
>>> that's what we're discussing now.
>>> ]
>>>
>>> Russell Coker <russell@coker.com.au> wrote:
>>>
>>>> On Wednesday 26 March 2008 04:31, Michael Stone <mstone@debian.org> wrote:
>>>>
>>>>> if (acl) then '+'
>>>>> else if (selinux) then '.'
>>>>>
>>>> Should there be some special marking of files with both a SE Linux context and
>>>> an ACL?
>>>>
>>>> Pity that they didn't choose an "a" to mark an ACL which would then permit
>>>> using "A" for ACL + MAC.
>>>>
>>> This is probably as good a time as any to make such a change, though
>>> I doubt it will make the cut for the upcoming release. I'd like to keep
>>> it simple (i.e., not try to encode all possible combinations). If you
>>> want to get full details, stat(1) is probably the program to change.
>>>
>>> I like Michael's suggestion. Rephrasing it,
>>>
>>> if (SELinux, with no other MAC or ACL)
>>> use '.'
>>> else if (any other combination of alternate access methods)
>>> use '+'
>>>
>>> If someone who already has a copyright assignment on file for coreutils
>>> wants to write the patch (including doc update, tests, NEWS, ChangeLog,
>>> etc.), please speak up ASAP. Otherwise I'll do it.
>>>
>> No one spoke up, so here's code, for discussion's sake.
>> I've tested it only lightly.
>> This change is not slated for the upcoming release.
>>
>> Here's sample output, running on an SELinux system:
>>
>> $ src/ls -ldgo [ac]*
>> -rw-r--r--. 1 42625 2008-04-02 19:31 aclocal.m4
>> drwxr-xr-x. 2 4096 2008-04-02 19:31 autom4te.cache
>> -rw-r--r--. 1 1597 2008-03-21 16:35 cfg.mk
>> -rw-r--r--. 1 1417195 2008-04-02 19:33 config.log
>> -rwxr-xr-x. 1 71225 2008-04-02 19:33 config.status
>> -rwxr-xr-x. 1 1846424 2008-04-02 19:31 configure
>> -rw-r--r--. 1 12014 2008-03-25 23:55 configure.ac
>>
This is so confusing. What is so horribly wrong with a capital S for
SELinux or A for ACL?
Vikram
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next prev parent reply other threads:[~2008-10-24 3:18 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-03-25 4:23 ls in Debian/Unstable Russell Coker
2008-03-25 14:09 ` Casey Schaufler
2008-03-25 15:08 ` Jim Meyering
2008-03-25 21:22 ` Russell Coker
[not found] ` <20080325173116.GQ2626@mathom.us>
2008-03-25 21:24 ` Bug#472590: " Russell Coker
2008-03-25 21:28 ` Jim Meyering
[not found] ` <20080325234310.GR2626@mathom.us>
2008-03-26 5:12 ` Russell Coker
2008-03-31 9:02 ` Jim Meyering
2008-03-31 9:23 ` Russell Coker
2008-03-31 9:43 ` Jim Meyering
2008-04-02 20:33 ` RFC: changing the "+" in ls -l output to be "." or "+" Jim Meyering
2008-10-23 12:20 ` Jim Meyering
2008-10-24 3:18 ` Vikram Noel Ambrose [this message]
2008-10-24 7:04 ` Jim Meyering
2008-10-24 13:19 ` Mike Edenfield
2008-10-26 7:46 ` Russell Coker
2008-10-26 8:09 ` Jim Meyering
2008-10-31 13:37 ` Daniel J Walsh
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=49013EA2.8070301@gmail.com \
--to=noel.ambrose@gmail.com \
--cc=472590@bugs.debian.org \
--cc=bug-coreutils@gnu.org \
--cc=jim@meyering.net \
--cc=ovasik@redhat.com \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.