Re: [PATCH] Basic support for checking NFSv4 ACLs in Linux

[Andreas Grünbacher]

Am Di., 15. Nov. 2022 um 13:46 Uhr schrieb Ondrej Valousek
<ondrej.valousek.xm@renesas.com>:
> > This would correspond to a mode attribute of "------rwx" according to the 
> > above statement,
> Well I do not think so as the RFC also states that EVERYONE@ means literally 
> everyone (including group and owner), so the above example would indeed 
> return rwxrwxrwx.

Well, I've explained it to you, but I can't understand it for you.

> Anyhow, would the code I offered do the job?

You mean the AIX code? That's at least missing ACE4_DELETE_CHILD for
directories, ACE4_WRITE_ACL for OWNER@, and a bunch of permissions
which are probably always on on UNIX systems (ACE4_READ_ATTRIBUTES,
ACE4_SYNCHRONIZE). I'm not really sure what to do about
ACE4_READ_NAMED_ATTRS and ACE4_WRITE_NAMED_ATTRS; those are not the
same as Linux extended attributes. This will need a bit of testing
against various NFSv4 servers to give reasonable results.

Andreas