From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Milan P. Stanic" Subject: Re: access control list for files Date: Mon, 16 Sep 2002 10:49:59 +0200 Sender: linux-admin-owner@vger.kernel.org Message-ID: <20020916084959.GA819@dl.oss.co.yu> References: Mime-Version: 1.0 Return-path: Content-Disposition: inline In-Reply-To: List-Id: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: linux-admin On Mon, Sep 16, 2002 at 11:30:01AM +0530, Mohammed Khalid Ansari wrote: > I want your comments on the following... > > Is this not a good idea that each and every file must have a access > control list associated with it like in widows so that I define the users > who can read, write or execute a particular file. I can't do this in > UNIX/Linux as we have to maintain only three groups (owner, group and > others). I can't create groups on my own and if I happened to be the > administrator then also its no feasible to create ACL as I will have to > create too many groups. > > How best we can go in UNIX/Linux. There are more solutions for ACL on Linux and it depends on the file-system type, because it is implemented trough file-system driver. IMHO for ext2/ext3 ACL patch at http://acl.bestbits.at/ are most promising. And samba can be compiled to support it. Milan