Re: Security issue - storing NTACL's in non-NT-security-namespace

xfs

Re: Security issue - storing NTACL's in non-NT-security-namespace

To:	Jeremy Allison <jra@xxxxxxxxx>
Subject:	Re: Security issue - storing NTACL's in non-NT-security-namespace
From:	"L.A. Walsh" <samba@xxxxxxxxx>
Date:	Fri, 13 Dec 2013 14:14:09 -0800
Cc:	Christoph Hellwig <hch@xxxxxxxxxxxxx>, Samba Technical <samba-technical@xxxxxxxxxxxxxxx>, xfs-oss <xfs@xxxxxxxxxxx>
Delivered-to:	xfs@xxxxxxxxxxx
In-reply-to:	<20131213220848.GG1005@samba2>
References:	<52A96211.3050602@xxxxxxxxx> <20131212181315.GB20500@samba2> <52AAC7CC.8000802@xxxxxxxxx> <20131213105314.GA2117@xxxxxxxxxxxxx> <52AB7CDC.5040801@xxxxxxxxx> <20131213220848.GG1005@samba2>
User-agent:	Thunderbird

On 12/13/2013 2:08 PM, Jeremy Allison wrote:

On Fri, Dec 13, 2013 at 01:32:12PM -0800, L.A. Walsh wrote:

Now NOTE: if I don't use "explicit action" (-a) in my copy:

Ishtar:law/Documents> /usr/bin/cp testfile.txt testcopy.txt
Ishtar:law/Documents> attr -l testcopy.txt
Attribute "SGI_ACL_FILE" has a 76 byte value for testcopy.txt

ONLY the root-namespace ACL is save  -- the user and security
attributes are striped.


What is the namespace for SGI_ACL_FILE ?

root

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
Re: Security issue - storing NTACL's in non-NT-security-namespace, L.A. Walsh Re: Security issue - storing NTACL's in non-NT-security-namespace, Jeremy Allison Re: Security issue - storing NTACL's in non-NT-security-namespace, L.A. Walsh <= Re: Security issue - storing NTACL's in non-NT-security-namespace, Dave Chinner Re: BTW - to xfs folk, 'security attr' doesn't seem very useful w/current copy policies, L.A. Walsh Re: BTW - to xfs folk, 'security attr' doesn't seem very useful w/current copy policies, Dave Chinner Re: usefulness of 'security attr' being non-copiable on discretionary access linux., LA Walsh Re: usefulness of 'security attr' being non-copiable on discretionary access linux., Dave Chinner Re: usefulness of 'security attr' being non-copiable on discretionary access linux., LA Walsh

Previous by Date:	Re: [PATCH 5/6] xfs: xlog_recover_process_data leaks like a sieve, Dave Chinner
Next by Date:	Re: [PATCH] xfs: remove the incorrect entry in the MAINTAINER file, Dave Chinner
Previous by Thread:	Re: Security issue - storing NTACL's in non-NT-security-namespace, Jeremy Allison
Next by Thread:	Re: Security issue - storing NTACL's in non-NT-security-namespace, Dave Chinner
Indexes:	[Date] [Thread] [Top] [All Lists]