File System ACLs

• Resource x principal x right --> yes/no

• Each resource (file or directory) has its own list

• Each list has entries for various principals and rights

• “All Users” principal

• Groups as well as individual users

Previous slide

Next slide

Back to first slide

View graphic version

If DAV ACLs are close to the underlying system model, then they are

• easier to code

• Contain fewer security holes

• More predictable

• Easier to explain, document?