Re: Adding entries to a directory

2009-11-19 Thread Sergiu Ivanov
Hello, On Thu, Nov 19, 2009 at 03:22:42PM +0100, Carl Fredrik Hammar wrote: > On Wed, Nov 18, 2009 at 08:03:30PM +0200, Sergiu Ivanov wrote: > > On Wed, Nov 18, 2009 at 10:21:13AM +0100, Carl Fredrik Hammar wrote: > > > > > > I imagined that you'd only try to add an entry to one of the unioned >

Solving the firmlink problem with io_restrict_auth (was Re: Adding entries to a directory)

2009-11-19 Thread Carl Fredrik Hammar
Hi, On Tue, Nov 17, 2009 at 08:55:38PM +0100, olafbuddenha...@gmx.net wrote: > On Tue, Nov 17, 2009 at 01:15:59PM +0100, Carl Fredrik Hammar wrote: > > > If run by any other user then it can only recreate the intersection of > > credentials between unionfs and the client. This isn't ideal, but i

Re: Adding entries to a directory

2009-11-19 Thread Carl Fredrik Hammar
Hi, On Wed, Nov 18, 2009 at 08:03:30PM +0200, Sergiu Ivanov wrote: > On Wed, Nov 18, 2009 at 10:21:13AM +0100, Carl Fredrik Hammar wrote: > > On Wed, Nov 18, 2009 at 12:15:16AM +0200, Sergiu Ivanov wrote: > > > On Tue, Nov 17, 2009 at 10:29:40PM +0100, Carl Fredrik Hammar wrote: > > > > > > > > 1.

Re: Adding entries to a directory

2009-11-18 Thread olafBuddenhagen
Hi, On Tue, Nov 17, 2009 at 01:15:59PM +0100, Carl Fredrik Hammar wrote: > If run by any other user then it can only recreate the intersection of > credentials between unionfs and the client. This isn't ideal, but it > does ensure that unionfs doesn't accidentally grant the client any new > perm

Re: Adding entries to a directory

2009-11-18 Thread Sergiu Ivanov
Hello, On Wed, Nov 18, 2009 at 10:21:13AM +0100, Carl Fredrik Hammar wrote: > On Wed, Nov 18, 2009 at 12:15:16AM +0200, Sergiu Ivanov wrote: > > On Tue, Nov 17, 2009 at 10:29:40PM +0100, Carl Fredrik Hammar wrote: > > > > > > 1. Alice opens unionfs directory > > > 2. unionfs opens unioned director

Re: Adding entries to a directory

2009-11-18 Thread Carl Fredrik Hammar
Hi, On Wed, Nov 18, 2009 at 12:15:16AM +0200, Sergiu Ivanov wrote: > On Tue, Nov 17, 2009 at 10:29:40PM +0100, Carl Fredrik Hammar wrote: > > > > I don't so much want to create a new file access mechanism, as I > > want to rely on the unioned directories own access mechanism, and let > > them deci

Re: Adding entries to a directory

2009-11-17 Thread Sergiu Ivanov
Hello, On Tue, Nov 17, 2009 at 10:29:40PM +0100, Carl Fredrik Hammar wrote: > > > > As explained above this assumes that the file permissions tell the > > > whole story. The main problem with my suggestion is that it might be > > > too restrictive. For instance, if user Alice wants to add an ent

Re: Adding entries to a directory

2009-11-17 Thread Carl Fredrik Hammar
Hi, On Tue, Nov 17, 2009 at 09:21:18PM +0200, Sergiu Ivanov wrote: > > > > My idea was that a unionfs *run* by root can recreate any auth object > > > > that the client has and then authenticate with it against the unioned > > > > directories. > > > > > > > > If run by any other user then it can

Re: Adding entries to a directory

2009-11-17 Thread Sergiu Ivanov
Hello, On Tue, Nov 17, 2009 at 07:20:03PM +0100, Carl Fredrik Hammar wrote: > On Tue, Nov 17, 2009 at 06:49:24PM +0200, Sergiu Ivanov wrote: > > On Tue, Nov 17, 2009 at 01:15:59PM +0100, Carl Fredrik Hammar wrote: > > No, I think you're confusing authentication and access control. > Authentication

Re: Adding entries to a directory

2009-11-17 Thread Carl Fredrik Hammar
Hi, On Tue, Nov 17, 2009 at 06:49:24PM +0200, Sergiu Ivanov wrote: > On Tue, Nov 17, 2009 at 01:15:59PM +0100, Carl Fredrik Hammar wrote: > > On Tue, Nov 17, 2009 at 11:57:46AM +0200, Sergiu Ivanov wrote: > > > On Mon, Nov 09, 2009 at 02:58:12PM +0100, Carl Fredrik Hammar wrote: > > > > On Thu, No

Re: Adding entries to a directory

2009-11-17 Thread Sergiu Ivanov
Hello, On Tue, Nov 17, 2009 at 01:15:59PM +0100, Carl Fredrik Hammar wrote: > On Tue, Nov 17, 2009 at 11:57:46AM +0200, Sergiu Ivanov wrote: > > On Mon, Nov 09, 2009 at 02:58:12PM +0100, Carl Fredrik Hammar wrote: > > > On Thu, Nov 05, 2009 at 12:29:54PM +0100, olafbuddenha...@gmx.net wrote: > > >

Re: Adding entries to a directory

2009-11-17 Thread Carl Fredrik Hammar
Hi, On Tue, Nov 17, 2009 at 11:57:46AM +0200, Sergiu Ivanov wrote: > On Mon, Nov 09, 2009 at 02:58:12PM +0100, Carl Fredrik Hammar wrote: > > On Thu, Nov 05, 2009 at 12:29:54PM +0100, olafbuddenha...@gmx.net wrote: > > > > > > > Well, obviously, O_READ permission on a directory is sufficient to >

Re: Adding entries to a directory

2009-11-17 Thread Sergiu Ivanov
Hello, On Mon, Nov 09, 2009 at 02:58:12PM +0100, Carl Fredrik Hammar wrote: > On Thu, Nov 05, 2009 at 12:29:54PM +0100, olafbuddenha...@gmx.net wrote: > > > > > Well, obviously, O_READ permission on a directory is sufficient to > > > create files in it. > > > > Ah, interesting... > > > > > I'm