|
|
Sponsored Content
12-12-2000
Administrator
ACLs are a kernel (core build of the OS) extension and the way ACLs are implemented are dependent on the UNIX variety. Some UNIXes support ACLs, other do not. Please specify the kernel details of the UNIX you are running.
Quite a few years ago I was hanging with Linus and crew at the 1st Linux conference in Amsterdam. I pleaded with Linus to add ACLs and ACL event logging to the Linux kernel so my more security minded clients could run Linux. I am not sure if Linus ever added ACLs to the Linux kernel. He was dead-set against it many years ago (this was around 1994 so things might have changed).
I know HPUX has a very nice ACL system in the kernel. In fact, the HPUX ACLs are so good that many high-availability systems run HPUX for that reason. ACLs in HPUX can be set for things like kernel system calls, etc. The entire system can be set up to monitor and log system calls that the administrator deems necessary for security.
Systems that do not implement ACLs with a high degree of granularity are not normally used in high-assurance systems. (Let's don't get into defining 'high-assurance' in this thread, OK
)
[Edited by Neo on 12-13-2000 at 02:19 AM]
Quite a few years ago I was hanging with Linus and crew at the 1st Linux conference in Amsterdam. I pleaded with Linus to add ACLs and ACL event logging to the Linux kernel so my more security minded clients could run Linux. I am not sure if Linus ever added ACLs to the Linux kernel. He was dead-set against it many years ago (this was around 1994 so things might have changed).
I know HPUX has a very nice ACL system in the kernel. In fact, the HPUX ACLs are so good that many high-availability systems run HPUX for that reason. ACLs in HPUX can be set for things like kernel system calls, etc. The entire system can be set up to monitor and log system calls that the administrator deems necessary for security.
Systems that do not implement ACLs with a high degree of granularity are not normally used in high-assurance systems. (Let's don't get into defining 'high-assurance' in this thread, OK
)[Edited by Neo on 12-13-2000 at 02:19 AM]
|
|
8 More Discussions You Might Find Interesting
1. AIX
Hi,
I want to know how to set acl in aix via smitty and shell prompt, wheather we needs to install additional packages. (0 Replies)
Discussion started by: manoj.solaris
0 Replies
2. Shell Programming and Scripting
Hi,
I generated a script that will create the list of dir/sub-dir and will allow to create the same on diff server. this is what i have done :
#!/bin/ksh
# Script to migrate the directory between the two servers.
# Ver 0.1
# Author Krishna. D
# c - create and e - extract directory
if ;... (1 Reply)
Discussion started by: krishnadvn
1 Replies
3. Linux
Hi, I want to know what does the "effective" comment means in the output of the getfacl and whether it has to do with the acl mask...
thanks (0 Replies)
Discussion started by: Gartlar
0 Replies
4. Solaris
Can i get the synopsis for add multiple users in single command for ACL access for a directory or a file
thanks in advance
dinu (3 Replies)
Discussion started by: dinu
3 Replies
5. HP-UX
Hello,
I try to find what year HP-UX got support for ACL (Access Control List)? I know that HP-UX was the first Unix with ACL support, but it is very hard to find the information on when that occured.
So anyone here know when that did happen?
Any answers are appreciated,
/eXpander (1 Reply)
Discussion started by: eXpander
1 Replies
6. UNIX for Advanced & Expert Users
Hi Friends,
I went through the ACL threads that were posted in the past but none were matching to my requirement . Hence starting a new thread .
Challenge :
user : a
group : Test1
user: b
group: Test2
Say under user a i create dir /tmp/debug with the privilege of 755 and also... (3 Replies)
Discussion started by: leobreaker
3 Replies
7. UNIX for Dummies Questions & Answers
Hi..
Could someone explain about setfacl,getfacl in unix and its uses.
Regards,
Suresh (1 Reply)
Discussion started by: suresh sunkara
1 Replies
8. UNIX for Advanced & Expert Users
All,
I am trying to clear ACL's completely from all files and folders in a directory. I can get the directories as cleared as:
# owner: root
# group: root
user::rwx
group::r-x
other::rwx
default:user::rwx
default:group::r-x
default:other::r-x
What ever I do I can't remove the... (4 Replies)
Discussion started by: hburnswell
4 Replies
LEARN ABOUT XFREE86
ftpconfig
ftpconfig(1M) System Administration Commands ftpconfig(1M) NAME
ftpconfig - set up anonymous FTP SYNOPSIS
ftpconfig [ftpdir] ftpconfig -d ftpdir DESCRIPTION
The ftpconfig script is executed by the super user to set up anonymous FTP. Anonymous FTP allows users to remotely log on to the FTP server by specifying the user name ftp or anonymous and the user's email address as password. The anonymous users are logged on to the FTP Server and given access to a restricted file area with its own file system root. See chroot(2). The FTP area has its own minimal system files. This command will copy and set up all the components needed to operate an anonymous FTP server, including creating the ftp user account, creating device nodes, copying /usr/lib files, and copying timezone data. The passwd and group files set up have been stripped down to prevent malicious users from finding login names on the server. The anonymous file area will be placed under ftpdir. If the ftp user account already exists, then the current FTP area is used, and the system files in it are updated. All other files are left untouched. This command should be run to update the anonymous FTP area's configuration whenever a system patch is installed, or the system is upgraded. OPTIONS
-d Create a new or update an existing ftpdir without creating or updating the ftp user account. Use this option when creating guest FTP user accounts. OPERANDS
The following operands are supported: ftpdir The absolute pathname of the directory under which the anonymous FTP area is set up. EXIT STATUS
The following exit values are returned: 0 Successful completion 1 Improper usage of the command 2 Command failed ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWftpu | +-----------------------------+-----------------------------+ |Interface Stability |Evolving | +-----------------------------+-----------------------------+ SEE ALSO
ftpaddhost(1M), in.ftpd(1M), useradd(1M), chroot(2), attributes(5) SunOS 5.10 1 May 2003 ftpconfig(1M)