#9 Transactional update of trustees

open
nobody
None
5
2005-04-29
2005-04-29
Andrew Ruder
No

It would be nice to allow trustees to have a
transactional update of the trustees. The problem is
that every time you run settrustees all the trustees
are cleared and then reloaded in. If an enterprising
user who has been denied access to a file could
repeatedly try to modify a file (if they have unix
permissions to it) and when trustees are reloaded, it
is possible that they could sneak in the crack and make
changes...

This shouldn't be overly difficult, but could be a
concern for high security applications.

Discussion