JFS and ACL

xri · 11-14-2010, 06:48 PM

I use only ext3 at work, and mount the partitions with acl, which lets me fine tune my security.

I've used jfs at home for a while, and recently, I decided to use some access lists too. So, I tried to do the same things I do at work (that includes options {defaults,acl} for /home at fstab. After that, Slack does not let me access my home at boot time. I believe I read somewhere that jfs did not support initially acl but at some point on the development acl became one of its regular features.

What am I missing here? How to implement acl on jfs?

Thanks for reading this.

H_TeXMeX_H · 11-15-2010, 04:35 AM

JFS does support ACL, it is this kernel option:

Code:

  ┌──────────────────── JFS POSIX Access Control Lists ─────────────────────┐
  │ CONFIG_JFS_POSIX_ACL:                                                   │  
  │                                                                         │  
  │ Posix Access Control Lists (ACLs) support permissions for users and     │  
  │ groups beyond the owner/group/world scheme.                             │  
  │                                                                         │  
  │ To learn more about Access Control Lists, visit the Posix ACLs for      │  
  │ Linux website <http://acl.bestbits.at/>.                                │  
  │                                                                         │  
  │ If you don't know what Access Control Lists are, say N                  │  
  │                                                                         │  
  │ Symbol: JFS_POSIX_ACL [=n]                                              │  
  │ Prompt: JFS POSIX Access Control Lists                                  │  
  │   Defined at fs/jfs/Kconfig:11                                          │  
  │   Depends on: BLOCK [=y] && JFS_FS [=y]                                 │  
  │   Location:                                                             │  
  │     -> File systems                                                     │  
  │       -> JFS filesystem support (JFS_FS [=y])                           │  
  │   Selects: FS_POSIX_ACL [=y]                                            │

So run:

Code:

bash-4.1$ zgrep CONFIG_JFS_POSIX_ACL /proc/config.gz 
# CONFIG_JFS_POSIX_ACL is not set

For me it is not set, but you should set it if it is not set and recompile the kernel. It also depends on what kernel you are using, it may already be set.

xri · 11-16-2010, 07:38 AM

Thank you, H_TeXMeX_H
I've got the vanilla slack kernel:

# uname -r

Quote:

2.6.33.4

# zgrep CONFIG_JFS_POSIX_ACL /proc/config.gz

Quote:

CONFIG_JFS_POSIX_ACL=y

H_TeXMeX_H · 11-16-2010, 01:47 PM

Ok, that's good, now just make sure ACL is setup properly:
http://nxlinuxadmin.blogspot.com/201...-in-linux.html