3 ms·
Depending on OS flavor UNIX has had ACLs piled on top of the classic owner-group-other security model for decades. SELinux in particular has decent ACL capabi
by technofiend 10y ago
Depending on OS flavor UNIX has had ACLs piled on top of the classic owner-group-other security model for decades.
SELinux in particular has decent ACL capabilities. By default Apache's policy allows listening on port 80 and a few other well known ports - you can configure the app to listen on $RANDOM_PORT but all that'll get you is an error in a logfile until you use semanage to fix it.
Or did I misunderstand your statement about no ACLs on anything?
- MichaelGG 10y agoI mean the default Unix model, like filesystem permissions, just have the very limited owner-group-everyone bits, nothing serious. SELinux does add a lot in but it's more of a bolt-on right? Compared to Windows where every thing, even an individual thread or other objects, come with ACLs.
- Tiksi 10y agoLinux supports POSIX ACLs, which I would classify as "default Unix" since it's POSIX, and also supports some extended non-portable ACLs: http://linux.die.net/man/5/acl http://linux.die.net/man/5/acl http://www.vanemery.com/Linux/ACL/POSIX_ACL_on_Linux.html http://www.vanemery.com/Linux/ACL/POSIX_ACL_on_Linux.html