3 ms·
The string-based representation of Windows ACLs is more complex than Linux ACLs - because it's a more complex and powerful system. While your last paragraph is
by GordonS 5y ago
The string-based representation of Windows ACLs is more complex than Linux ACLs - because it's a more complex and powerful system.
While your last paragraph is technically true, ACLs can also be applied on files from network shares.
And of course (just as on Linux), even on single, non-networked machines, only very technical users will realistically be able to access files they are not authorised for.
- api 5y agoIt may be more capable but that comes at a high cost in terms of usability, bugs, and vulnerabilities. Complexity is generally bad for security especially when the system doesn't seem well designed to manage it.