From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: AS22989 209.51.188.0/24 X-Spam-Status: No, score=-3.8 required=3.0 tests=AWL,BAYES_00,DKIM_INVALID, DKIM_SIGNED,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, RCVD_IN_DNSWL_HI,RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS shortcircuit=no autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dcvr.yhbt.net (Postfix) with ESMTPS id 1B47D1F47C for ; Mon, 16 Jan 2023 20:22:35 +0000 (UTC) Authentication-Results: dcvr.yhbt.net; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=clisp.org header.i=@clisp.org header.a=rsa-sha256 header.s=strato-dkim-0002 header.b=QwBMR844; dkim-atps=neutral Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pHVzg-0002eS-FZ; Mon, 16 Jan 2023 15:22:12 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pHVze-0002do-Lf; Mon, 16 Jan 2023 15:22:10 -0500 Received: from mo4-p00-ob.smtp.rzone.de ([85.215.255.22]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pHVzc-0001rS-HC; Mon, 16 Jan 2023 15:22:10 -0500 ARC-Seal: i=1; a=rsa-sha256; t=1673900523; cv=none; d=strato.com; s=strato-dkim-0002; b=mZURXjYB9PIdaKKKxO0j/urvYXowKpPeh5zIAyyXJ6VbOp0gOeGPCHbTfW4KSpSht3 onHn/rvudjkLblKUPFwjMjhelebRtbK4tBKFrRpVOwnScWoDvLcF9gZvakyxIMyZVscI O5R4hsNLGU49fACbT/qxcULsV4oIe0kXDTeaA+M4Dx3mkH78zSFMmGIAwSDXKT0t1rha xQGwn1VPZQ3vpH/JErG1xDPTYX6PMBTpFYxoNxznmFnNAwZmyCk2ILnpVsqPFFujM231 vIrWsK4cDH1PjULTc1Mh6ctdsChXTzEyZj0DncOKoMVyM5ncGS9C2YbgzxetndtMNN+M TlRA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; t=1673900523; s=strato-dkim-0002; d=strato.com; h=References:In-Reply-To:Message-ID:Date:Subject:Cc:To:From:Cc:Date: From:Subject:Sender; bh=Tec7S1QGvdN73JybXSl3KKXWAfWXtOkunaNKjPIbo98=; b=Uk3HVTT9WzXyYu517wvKyY1pSK+ZpXExgUpvAj9AUbJ2M4zh4bZlmsJbdaaMXjdsdJ RgwpShzfvuuSDhESSM+rbztFKqHjRpY094qRB6WVnWJVRNPpKnOdB/maFOufKNFTzkx4 JgX+PYUTQKgv0DkvvQF/hbecXaZaDpEtOuBPbJ1R32MgvbvjpmRJ/nOSBJzO0eul3Iy+ 3GD8QKgJMrvCM7yMUb3C2MaTs5VQ55G8TNnE3+IJTnor16JI9JcySKqy21ax3E+d43bl D1EdiYM8/xWphe7EcON8KJw/NqOhkPS75MPsijLSvJ6fxL/GduI7/r0/6PrWyGADe/Lj x5OA== ARC-Authentication-Results: i=1; strato.com; arc=none; dkim=none X-RZG-CLASS-ID: mo00 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1673900523; s=strato-dkim-0002; d=clisp.org; h=References:In-Reply-To:Message-ID:Date:Subject:Cc:To:From:Cc:Date: From:Subject:Sender; bh=Tec7S1QGvdN73JybXSl3KKXWAfWXtOkunaNKjPIbo98=; b=QwBMR844BgfxLbBg1z4X+eSSNl5Iyxob3TnxYc1Zsqbyn+QH9Q2RdlhTZXpEolLIhq Nkab4ZV33HL3i66pgwCQHs50RXLAb4+5mkPLVZNmFbCu297OaSfhpMIvcYkNG4y4ugGF GqzxmXW20ZhfW7vHirT0QW4WAkcxYDU7gct4cP8dA/ez2/grsrXvJ4EuSAZ9OTSJPLWK jCyzo5OvGwsBoUBxPN1AgnSN0/dgkUQ3rshM2tF0cFsSEYJNPoh0wDEpk2Zty6eAv7nK 6Mte3yyOk2huiguCWTAyla8iCVpCTslaheFcme0wsAyE5e1oVzbQ3INdaDtdT5eP/921 EcgQ== X-RZG-AUTH: ":Ln4Re0+Ic/6oZXR1YgKryK8brlshOcZlIWs+iCP5vnk6shH0WWb0LN8XZoH94zq68+3cfpOejvVUYts2exEnhvWSurYgn7u6IQ==" Received: from nimes.localnet by smtp.strato.de (RZmta 48.6.2 AUTH) with ESMTPSA id I8f358z0GKM2P65 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)) (Client did not present a certificate); Mon, 16 Jan 2023 21:22:02 +0100 (CET) From: Bruno Haible To: Ondrej Valousek , =?ISO-8859-1?Q?P=E1draig?= Brady Cc: coreutils@gnu.org, bug-gnulib@gnu.org Subject: Re: Improve support for ACLs in coreutils (ls & chmod) following the Solaris way Date: Mon, 16 Jan 2023 21:22:02 +0100 Message-ID: <8620854.Cn2kBfCCpG@nimes> In-Reply-To: References: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="iso-8859-1" Received-SPF: none client-ip=85.215.255.22; envelope-from=bruno@clisp.org; helo=mo4-p00-ob.smtp.rzone.de X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_NONE=0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: bug-gnulib@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Gnulib discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnulib-bounces+normalperson=yhbt.net@gnu.org Sender: bug-gnulib-bounces+normalperson=yhbt.net@gnu.org P=E1draig Brady wrote: > So as we see there are lots of "additional attributes" > with dedicated programs to manipulate them. > What's the big advantage of merging with ls and chmod, > over the current situation of separate utilities? In [1] I'm arguing: * A feature that has impact on security, and that its users don't understand, is a major security problem it itself. If it's too easy to misunderstand what effect a specific ACL has, it will cause unintended ACLs to be set. * Hence efforts should be made that enable the users to understand the ACLs that they may set or have set. * Most users have no experience with {get,set}facl, {get,set}fattr, {ls,ch}attr, only with 'ls' and 'chmod'. Therefore it will be easier for them to learn another 'ls' option that to remember three(!) other programs getfacl, getfattr, lsattr. Bruno [1] https://lists.gnu.org/archive/html/bug-gnulib/2023-01/msg00086.html