Document new ACL code
* new-features.xml (ov-new2.4): Add new ACL changes. Signed-off-by: Corinna Vinschen <corinna@vinschen.de>
This commit is contained in:
@@ -1,3 +1,7 @@
|
||||
2015-11-18 Corinna Vinschen <corinna@vinschen.de>
|
||||
|
||||
* new-features.xml (ov-new2.4): Add new ACL changes.
|
||||
|
||||
2015-11-18 Corinna Vinschen <corinna@vinschen.de>
|
||||
|
||||
* utils.xml (setfacl): Accommodate -b/-k change.
|
||||
|
@@ -8,6 +8,29 @@
|
||||
|
||||
<itemizedlist mark="bullet">
|
||||
|
||||
<listitem><para>
|
||||
New, unified implementation of POSIX permission and ACL handling. The
|
||||
new ACLs now store the POSIX ACL MASK/CLASS_OBJ permission mask, and
|
||||
they allow to inherit the S_ISGID bit. ACL inheritance now really
|
||||
works as desired, in a limited, but theoretically equivalent fashion
|
||||
even for non-Cygwin processes.</para>
|
||||
|
||||
<para>To accommodate standard Windows ACLs, the POSIX permissions of
|
||||
the owner and all other users in the ACL are computed using the Windows
|
||||
AuthZ API. This may slow down the computation of POSIX permissions
|
||||
noticably in some circumstances, but is generally more correct.
|
||||
The new code also ignores SYSTEM and Administrators group permissions
|
||||
when computing the MASK/CLASS_OBJ permission mask on old ACLs, and it
|
||||
doesn't deny access to SYSTEM and Administrators group based on the
|
||||
value of MASK/CLASS_OBJ when creating the new ACLs.</para>
|
||||
|
||||
<para>The new code now handles the S_ISGID bit on directories as on Linux:
|
||||
Setting S_ISGID on a directory causes new files and subdirs created
|
||||
within to inherit its group, rather than the primary group of the user
|
||||
who created the file. This only works for files and directories
|
||||
created by Cygwin processes.
|
||||
</para></listitem>
|
||||
|
||||
<listitem><para>
|
||||
New API: rpmatch.
|
||||
</para></listitem>
|
||||
|
Reference in New Issue
Block a user