Hacker News new | ask | show | jobs
by Zurrrrr 1248 days ago
> smeared all over the system

I mean, ACL data is normally stored in filesysem metadata, nothing is 'smeared'.

1 comments

If you as an administrator want to see where you have granted additional funny permissions, with ACLs your only recourse is to getfacl everything on the filesystem, whereas with sudo everything is listed in /etc/sudoers and classically the group membership in /etc/passwd gives you a pretty good idea. I don’t know if that’s a reasonable thing to want, actually, but it is one that makes me mildly unconfortable with ACL systems in general.