Re: bug when running setfacl recursively

"Jeffrey D. Means" <[email protected]> Tue, 25 Jan 2005 14:52:09 -0700
Newsgroups gmane.linux.file-systems.acl.devel
Message-ID <[email protected]>
This looks like I'm stupid, I forgot that I had a few symlinks in
the /nfs directory that pointed to various places on my filesystem.  I
assume that when setfacl recursed those directories it thus managed to
gain access to the root of my filesystem.  Now when I use setfacl -RP -m
u:[username]:[access rights] /nfs it works properly.  Thanks for your
concern.

On Tue, 2005-01-25 at 09:40 +0100, Andreas Gruenbacher wrote:
> Hello,
> 
> On Monday 24 January 2005 20:35, Jeffrey D. Means wrote:
> > When i issue the command 'setfacl -R -m u:[user]:rwx /nfs' setfacl
> > processes the entire filesystem.  I believe it is because directory
> > entries . and .. get processed and acted upon.  I do not think this is
> > the expected behavior at least it is not what I expect to happen.
> >
> > I am using jfs for my filesystem along with setfacl version 2.2.23
> > running under Fedora Core 3 with all updates applied.
> 
> I cannot reproduce with 2.2.25 (which should make no difference for directory 
> walking). What is /nfs: a mount point, directory, symlink? Can you attach an 
> strace?
> 
> Thanks,
-- 
Jeffrey D. Means                                   [email protected]
Owner / CIO for MeansPC                       http://www.meanspc.com/
Custom Web Development For Your Needs.                 (970)308-1298

 - The stupidity of a stupid person is exercised in a restricted
field; the stupidity of an intelligent individual has a much broader
diffusion, and far greater effect, aided  as it is by the element
of surprise.

My Public PGP Key ID is: 0x81F00126
and available via:  
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x81F00126

_______________________________________________
acl-devel mailing list
[email protected]
http://acl.bestbits.at/mailman/listinfo/acl-devel
signature.asc (application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQBB9r+ISwct1IHwASYRAm5SAJ97Jl5giXeOwV/XvD5OFFR2lQLtVwCfXEi9
r+44vs/2EJgMqFMeWpnIzNg=
=YHSp
-----END PGP SIGNATURE-----