3 ms·
"Negative permissions have consistently been regarded as bad practice and often treated as theoretical concept...If you find yourself reliant on them, consider
by gneray 3y ago
"Negative permissions have consistently been regarded as bad practice and often treated as theoretical concept...If you find yourself reliant on them, consider one of the following actions: Restructure your permissions into proper allow rules; this is the most recommended approach."
This resonates. Negative permissions can be a real footgun, which is why we are being very surgical on if/where to introduce them at Oso[1]
[1] https://www.osohq.com/ https://www.osohq.com/
- NikkiA 3y agoThey were even generally considered a bad idea back on VMS' ACL system.
- gdgghhhhh 3y agoFunny to see them used as example by a tutorial from Red hat: https://www.redhat.com/sysadmin/linux-access-control-lists https://www.redhat.com/sysadmin/linux-access-control-lists
- deleted 3y ago[deleted]
- nullindividual 3y agoDeny ACLs have come in very handy when the file structure cannot be re-ordered, or you want to prevent a reg key from being changed, etc. Deny is useful!