ACL (Access control lists) in PC-BSD

[Gorthaur]

I think I will not surprise people if I'll say that basic unix object permissioning system isnt quite flexible (I mean user,group,other access limitations only). Since PC-BSD is an integration of stability (taken from FreeBSD) and user friendliness - maybe it will be a good idea to add ACLs (perhaps optionaly during the execution of "installation wizard") to the filesystem? Originaly FreeBSD supports ACL and even has ACL option enabled in GENERIC kernel.

The only bad thing - AFAIK there is no GUI to manage ACLs. For exampe if you want to share your Pictures folder with user A and B(but to deny the rest of users) and to deny user C(only) from running mpg123 and have ACL enabled on your filesystem - you can just use getfacl/setfacl set of commands to do this easily. It could be even more simple if it will be possible to right-click on the object in Konqueror for example and from choosing Properties->Extended Atributes (or such) select the user/group and the coresponding access permissions to this object.

In my opinion this will be very useful not only for administrators but first of all for average users on home/work multiuser computers or for those who has some network guest accounts on their machine (ssh or some other). If the FreeBSD provides the state-of-the-art capabilities - so why dont to use 'em?

If this sounds interesting to pc-bsd community (and first of all to ps-bsd developers) - I'll be very glad to help by coding or applying my fbsd skills in other way.

WBR, Gorthaur

[sblevin]

Yes yes yes yes yes - I've said in a couple of posts as well about ACL's, but it's been a silent argument : )

Definitely a GUI integrated thing - possibly a kpart? I've heard of admins using samba on files servers so they can have any form of sensible permission management at all, as rwxrwxrwx is still remarkably primitive.

Unbelievably primitive actually. In fact, I COULD go so far as to say, mindlessly pathetic in a dysfunctional and terminally retarded brain dead windows promoting suicidal way that couldn't be thought of as anything other than a deliberate way to cripple uptake, force administration time over adoptable levels and was created by some dribbling mental amoeba that forgot to wet the piece of cat shit it uses as a brain before thinking it up, only to be out shined by a zombie community of undead technological stone age discards that see no need to get rid of it ...... but I won't say that as I might get flamed : )