[BProc] Re: node ACLs

[Nicholas H. <he...@se...>]

On Thu, 2003-10-16 at 19:01, er...@he... wrote:
> On Thu, Oct 16, 2003 at 05:23:05PM -0400, Nicholas Henke wrote:
> > Any ideas on how hard it would be to add access control lists to nodes?
> > We are getting pretty hard pressure here to support multiple users per
> > node. I would be doing the coding, just looking for ideas and a sanity
> > check.
> 
> Here's my plan on that one:
> 
>  1: Wait till I port to 2.6
> 
>  2: Then use all the existing POSIX ACL stuff.  This should be trivial
>  at that point since "bpfs" (the node file system in BProc 4.0.0pre1)
>  already has support for arbitrary extended file attributes.
> 
> Until then, the UNIX file system-like semantics are pretty limiting
> for that case and it won't be easy to fix.
> 
> It might be fairly easy to skip straight to step 2 (on BProc 4, not
> 3.2.6) since there are some ACL patches for Linux 2.4.  I haven't
> tried that so I have no idea what the feasibility of that will be.

I looked at the info available on the ACL support for 2.4, and it looks
fairly sane. From what I can see, those are the same patches that the
Lustre folks are also using. 

Once I get 4.0pre up on struggles, I am going to look at the bpfs stuff
to see what it would take to get this done. I hope to have a better idea
in a few weeks :)

Thanks for the info ~
Nic
-- 
Nicholas Henke
Penguin Herder & Linux Cluster System Programmer
Liniac Project - Univ. of Pennsylvania