Access Control Lists
Information on getting an IFS home directory can be found in
Institutional File System User Overview, Reference R1070. This Step-by-step assumes you are familiar with basic UNIX file manipulation commands and have AFS software installed on your UNIX workstation.smoke fetish archive Avril lavigne pussy genie in a string bikinie cast Girls fuck horses stories pornstars xxx babes Nikki schieler ziering nude dickies jeans Skinny teen bitches hentai sex videos free Little girls sex nude pot Boob tube High school musical vanessa nude pics free artistic nude photos pussy prowler Gayforit watch free lesbian videos free teen celebs nude Bikini dare galleries spiritual sport fucking Big and beautiful porn stars
faked nude Sleep nude girls nature nude video Catfight nude nude asian sluts nude ladies pussy Sara roemer nude asian girls non nude School girls nude pics gay nude workout Nude nudist pamela anderson playboy nude pics Kathrine heigel nude Free nude hentai fairies nude swedish blonde nude Nude celebrity videos for free nude celebrities miley cyrus nude south african men Free hardcore nude nude cellphone pictures Bollywood nude boobs
blowjobs gallery Jim hardick free porn videos no credit card Creatine sex milfporn star aluminium essex Free video sex positions ultrapasswords xxx Xxx teen britney spears blowjob video Facts teenagers curfews natural hairy pussy Amature women Edwin carungay fuckyourtube sexproadventures Free kinky sex tips rave sex porn lyrics sexy back Better than sex cake recipe final fantasy rikku xxx Paris hilton blowjob
free yno sex video 3d young art sex phone web cam sex Amature woman sex party free home-made sex clips young sex in america Free dirty sex pictures best sfrican sex movies He she sex pics picts of amature sex Julie michaels sex scene bible view on sex Sex tv tv show Extreme insertion sex 6 fee animal sex vids sex girls piss tube Thai pussy sex porn sex 3d fantasy pics sex mature woman jokes Jeremiah birthday sex bio tulsa police sex registration Sex vedeo stream chat
independent sex scenes Racist daughter sex clearanced sex toys K9 sex clips britney sex movies black sex squirt Awsome hard sex manson sex onstage Nimpho sex classifieds sex offenders index Nomid animal sex hardcore lezbo sex Oral sex possitions Out sex videos sly fox sex famos toon sex Only ebony sex anette dawn sex extent sex pill Mature hairy sex asian sex french Kim kardishan sex
education research group Ari banerjee yankee group ancestry group Randy orton group free group sex porno group insurances Galleon group hedge fund rubber fab technologies group Attorneys group group b infection Risk retention group insurance the rules support group Green resources group Group dynamics team r46b group high five amateurs group Amazing group sex on demand color group lesbian group gallery Campy centaur group accept group Group of deer is called
fucking machine xxx College sex xxx chobits xxx Iran xxx sexo xxx enanas collection xxx Eve angel xxx pork xxx Older women xxx download free psp xxx Xxx sluts videos swingers xxx free Free bi xxx Photos xxx free harecore xxx xxx porn passwords Rapes xxx xxx adult dvd xxx gratis con putas Web site xxx free xxx mangas Alena seredova xxx
ball dragon porn video The thrills music video woman squirting free video Roma video card e pci video mtv jam video Apartment mikes picture video paris hilton video stills Big cock homemade movie council meeting video Studio telescope video converter ipod ora video Victoria pink videos Uk movies cussler movie new video releases 2005 Conferencing live video violence video games children tasha nelson video Rv video camera movie graber Adam sandler secret video
teacher sex crazydumper Sex health video marriage with sex Celebrity sex viceos busty office sex shove bull sex Football sex rio free sex shots Consensual submission sex free sex gemes Mauritius sex site hardcore sex mp3 Barbarella sex machine Hunting sex jessica alien sex gaems free sex xxx Muscular sex pictures ass booty sex dogpound group sex Anail sex videos vitamins before sex Brewster sex stories
asians sex Haveing sex with a man lesbien sex xxx Hypno girl sex arabic sex 9356 biker girls sex Guilty gear sex mature free sex tube Nude girls having sex with boys ray j and kim kardashian full sex tape for free Cyber sex forum what is angry sex Sex while pregnant pictures When can i have sex and not get pregnant home made amateur sex tapes dog sex beastality Sex games online for women clips cartoon sex taboo charming mother sex Girl sex pose hardcore gothic sex Best sex teacher
love sex relatioships Historical books sex pegging sex literature Sex story community sex bites torrent long sex trailors Gonzo rawr sex carrie bradshaw sex Voung teen sex home sex stream Kinky sex forum savvanah gold sex Anal sex wide Crushing for sex comic sex jokes mermaid sex videos Pet sex foram ali sheffield sex cancer sex partners Calforina sex retreat mini teens sex Anal sex cum
victorian xxx Xxx sci fi sexy photos xxx Xxx video play xxx babe videos animail xxx All xxx tube tilf 2 xxx Xxx puzzle black porno xxx 3gp xxx wap videos streaming xxx Free xxx moves Muscle gay xxx free gothic xxx video naruto xxx Xxx pass free best xxx movie 2008 xxx dog clips Xxx free e cards xxx porn full videos Xxx stone
porn movie theaters Morgan lane porn catherine porn Porn mom son sex mommy and daddy porn kasumi porn Find porn torrents rumania porn Xxx pictures porn black porn videos free Discipline porn biggest penis porn Littel girl porn Porn leg warmers tiny tits porn movies top 10 porn clips Free lovemaking porn homemade mexican porn vanessa raia porn Muslim porn sex free high definition porn streaming James nichols gay porn
fuck me gay Vulva fuck sexy fuck movie Mother lets son fuck her fuck you mom and dad mommy fuck son Father son fuck girl porn to fuck Fuck off letter fuck my boob Megaupload fuck i fuck my mother inlaw Doggy style fuck videos Woman looking to fuck shemales fuck girls movies kama sutra fuck Fuck you love mother daughter fuck boyfriend fuck church Dog fuck woman movies the fuck buttons Man fuck his dog
Blowjob And Cum Swallow mom giving son blowjob Preggo Blowjob free blowjob compilations blowjob mature Blowjob Guys blowjob fantasies 18 Avatar Blowjob sister gave me a blowjob Tickling Blowjob blowjob at school Hentai Porn Blowjob Fake Blowjob girl pukes during blowjob blowjob tryouts Guys Blowjob japanese girl giving blowjob most famous blowjob Gay Horse Blowjob double blowjob vids Blowjob Outdoor
Youngest Girl Porn Ever plus size sexy school girl Flavor Flav Girl Poops all girl sex videos girl porche Baby Girl I Want You gossip girl on tv com Hey Hey Baby Will You Be My Girl naked girl shitting Little Girl Photos ghetto black girl Go Go Girl Adult Girl Psp Theme girl for sale on ebay pin up girl hats Little Monster Girl naked teen girl pics black girl actress Sleeping Girl Gets Raped how to approach a girl online Girl And Girl Haveing Sex
Ink bitch webbie gutta bitch Lyrics to five star bitch bitch in french Badd bitch quotes cant trust no bitch Bitch asian im a pretty bitch Kristen stewart is a bitch a bitch slap G unit fat bitch Shut up bitch download im in san diego bitch cock hungry bitch Teeh fuck the bitch is kristen stewart a bitch bitch milfs Lyrics to bitch by meredith brooks foot fetish bitch Shake that ass bitch and let
paris hilton beach sex Cocksucker snake girls xxx Nude booty poppin little teens pics most extreme porn list Audience analysis heather locklear nude Porn star named madison lolita preteens Cheyanne bride black cock joelle amateur Nude christina aguilera Nice nude teen photo gallery hot cab mature sex sites Fucked by my dog mpegs massive tits men fucking boys Swedish porn galleries amateur nudes Sexy superheroes
bbw nude women Nude pussy cum naomi nude Nude asian americans courtney smith nude sienna guillory nude Girls basketball nude kate bosworth nude fakes Amateur wife nude photos ukraine nude teen Big black ass nude kiera knightley nude pics Nude russians Sleep nude chris brown rihanna nude photos pic of nude girls Bollywood nude images sexy and nude pics free nude college girl videos Nude dads and daughters ameture nude pictures Serena williams nude pix
1st Anal Sex what is an anal prolapse Types Of Anal Sex gay anal sex technique gay anal fisting videos Why Does Anal Sex Feel Good video double anal Lesbian Teens Anal largest anal dildo Lesbian Anal Toy anal sex poop videos Anal Hidden Cam Amateur Interracial Anal amy amour anal how to anal intercourse Anal Sex Condoms eyaculacion anal free anal streaming Anne Hathaway Loves Anal mini anal Unnatural Anal Insertions
Anal Guest free full anal movies Manual Anal 1st anal video shits herself anal Couple Anal Sex roxy renolds anal Sara Jay First Anal Scene anal destruction casedy Como Hacer El Sexo Anal anal sex effects Anal Cancer Blog Anal Toys Lesbian ice la fox anal scene lesbian anal vid Rough Anal Sex Clips wet anal double anal sex movie Palin Anal really painful anal Shitty Anal Fuck
rodox sex mpg Shower sex how penis breasts sex Sex malam pertama random sex videos exsplicit sex videos Sex lubrication silicone i post sex Sex fat chick celebriies having sex Adult sex animations sex and motorcycles Adult sex therapy Laura cover sex fucking having sex sex vacation caribbean Pool sex orgasm women barbershop sex office sex gay Secretaire office sex black sex vod Rainbow mika sex
Rock cock jock cock robin when your Wife big cock huge cock free pics Mature sucking black cock cock docking clips Hardcore riding cock cock sucking whores Fuck you cock sucker cock fighting rules Big cock hardcore Hubby loans to black cock milf sucking young cock two cock in pussy Cock sucker t shirt two cock fucking cock pierced Tila tequila suck cock largest cock videos White teen black cock
miss teen usa south carolina Fucking boobs thumbnails free videos of gay black me gandbang Senior sex trailer sophie monk nude nude music videos Britney spears porn video maggie grace nude Preteen bikini movies xxx Sexy pamela anderson vanessa new nude photos Aisha tyler nude pics Gametophyte produces male female sex mate plants toothless blowjob monthly membership streaming porn Pinkpanteens preteens in thongs lingerie nudecollege students Fat mature sex teen monologues Ebony muff diving
sex with hookers Free jaybee sex sex with redheads Cartoons about sex usa sex forum retarted girls sex Photo booth sex gay virgin sex Female sex chromosome sex teen candy Teenage sex story sex feet tingle Celebrity sex sces Flex girl sex lesbian sex galerii work at sex Rough sex free roug gangbang sex hypnosis sex best Sex trek 6 teens wating sex Ssecretary sex videos
1st Anal Sex what is an anal prolapse Types Of Anal Sex gay anal sex technique gay anal fisting videos Why Does Anal Sex Feel Good video double anal Lesbian Teens Anal largest anal dildo Lesbian Anal Toy anal sex poop videos Anal Hidden Cam Amateur Interracial Anal amy amour anal how to anal intercourse Anal Sex Condoms eyaculacion anal free anal streaming Anne Hathaway Loves Anal mini anal Unnatural Anal Insertions
AFS is a UNIX-based file system that allows widely distributed UNIX machines to share a common file space. IFS is an extension to AFS that allows AFS file serving software to run on mainframe computers in addition to UNIX workstations, and allows Macintosh and IBM PC and compatible computers to connect to the worldwide AFS system. IFS login names are uniqnames with Kerberos passwords. AFS system login names may or may not be uniqnames and may or may not make use of Kerberos passwords— contact your AFS system administrator for more information.
Access Control Lists (ACLs)
IFS users arrange files in directories and subdirectories to make them more manageable. To share your data in a particular directory, you can give the directory a list of users and the rights they have in that directory. This list is called an Access Control List (ACL). An ACL is a list of uniqnames (login names) and/or protection groups (a collection of uniqnames) paired with their access rights. ACLs are the main means of file protection under AFS and are separate from the mode bits associated with each file in the UNIX file system. There are seven basic access rights (the underlined portion of each access right listed below is the form used when issuing a command):
l
ookup The user or group with lookup rights can list the names of files and subdirectories in the directory but not read their contents. Before a user can read the contents of the file, he or she also needs read access (see below). A user or group must have lookup access rights in order to use any other rights. If you assigned read rights to the group system:anyuser but did not assign lookup access rights, no one from that group could either see a list of files in that directory or choose a file in order to read its contents.
i
nsert The user or group with insert rights can add new files to the directory, copy an existing file to make a new file, or create new subdirectories. The user with insert rights can put a file in one of your directories.
d
elete The user or group with delete rights can remove files and subdirectories or move them into other directories (if the user has insert access rights on the other directory).
a
dmin The user or group with admin rights can change the privileges for that directory. Users always have this right on their home directories and any directories they create within their home directories.
r
ead The user or group with read (and lookup) rights can open and examine the contents of any of the files in a specified directory. The user can also list the files in any subdirectory in the specified directory.
w
rite The user or group with write (and lookup) rights can make changes in any file in the specified directory.
lock
The user or group with lock (and lookup) rights can place read or write limitations on any file in the directory. Lock, a rarely used ACL, allows users to lock a file while they are updating it so that no other user can alter it until the lock is released.
There are four shorthand rights that are useful for assigning common combinations of the above rights. They are:
write All rights except admin (rlidwk) |
all All seven rights (rlidwka)
|
read Read and lookup rights (rl) |
none No rights |
Default ACLs
Users who received an IFS home directory before July 1992 have a default home directory ACL that gives read and lookup access to system:anyuser (system:anyuser is a protection group consisting of all users in the system, including guests from other AFS cells). The default ACL for users who received an IFS home directory after July 1992 allows only lookup access to system:anyuser. Additionally, four subdirectories are provided with the following defaults (system:authuser is a group consisting of all users authenticated in the cell):
Subdirectory
Rights GroupPublic rl system:anyuser
Private none system:anyuser
Shared rl system:authuser
Drop Box liw system:authuser
Because the home directory is now lookup only, all of the dot (.) files needed by a UNIX workstation on startup should be symbolic links to the Public directory (the dot files actually reside in the Public directory). For example, to do this for the .cshrc file, the user would copy the file to Public and then use the following command while the working directory is his/her home directory:
ln -s Public/.cshrc .cshrc
Sample ACLs: users to Whom These ACLs Might Be Assigned
r l i d w k a All seven ACLs are assigned by default to the directory owner.
r l w
You assign read, write, and lookup rights to users who have your permission to read and make changes in the files in one of your directories. For example, a writer might assign these ACLs to another writer to facilitate the editing process.
l i (w)
Insert and lookup rights are assigned to users who have your permission to put files into one of your directories. These two permissions are commonly assigned to a directory in which other users can deposit files for you to look at. Because of the way the Macintosh operating system works, Macintosh users will also need write permission in directories where you’d like them to be able to place files.
Subdirectories inherit ACLs from their parent directories (directories in which they are created). When you create a subdirectory in one of your directories, it automatically gets the same ACLs as its parent directory. You must reassign rights to subdirectories if they are to have different rights from the parent directory. If you later change the ACLs of the parent directory, the ACLs of any subdirectories in the parent directory will not automatically change to match the parent directory. If your home directory has lookup and read permissions to system:anyuser, anyone who can access IFS anywhere in the world can list the names and examine the contents of your files. To ensure security, set permissions on each subdirectory within your home directory to protect your files.
Useful AFS ACL Commands
fs listacl
Lists access privileges for the current or specified directory. la is an acceptable alias for the listacl command.
fs setacl
Sets access rights for a specified directory. These rights include the access and shorthand rights listed above, and can be assigned to specified users and protection groups. For example:
fs setacl labwork ren rlidwka
gives the user ren full access to a directory named labwork. Using the shorthand ACL all below gives the same results:
fs setacl labwork ren all
To remove all access from any user to the labwork directory, use:
fs setacl labwork system:anyuser none
sa is an acceptable alias for the setacl command. Using this, the above command can be shortened to:
fs sa labwork system:anyuser none
To set ACLs on multiple directories at once, add the switches
-dir and -acl to the command. The command below removes access to the tmp, usr, and bin directories for any user.
fs sa -dir tmp usr bin -acl system:anyuser none
It’s possible that you may want to grant access to all members of a protection group, except for an individual or two. Up to now the examples have only used normal ACLs, which grant rights. To deny rights you need negative ACLs.
fs setacl work class:eecs434 all
fs setacl -negative work generic all
The commands above grant all access in the work directory to members of the group class:eecs434, excepting the user generic (who is also a member of that protection group). When using negative ACLs, you should specify the list of rights you want to deny the user. To restore access to the user generic, you must clear the negative ACL by issuing:
fs setacl -negative work generic none
The -clear flag erases both the normal and negative rights part of an ACL. The rights you then specify go onto the newly cleared list. The command below clears the normal and negative ACLs from the work directory and assigns new permissions (rwli) to the class:eecs434 group.
fs setacl -clear work class:eecs434 rwli
fs help
Provides a brief help description of the specified command. If no command is specified, brief help will be provided on all fs commands. The command fs help setacl will provide help on the fs setacl command.
UNIX Mode Bits in AFS
UNIX file protection is based on the nine mode bits associated with each file. AFS uses only the first three or user mode bits. An ls -l listing on a directory owned by the user generic is shown below. The first character shows the type of the element listed (- for a file, d for a directory, or l for a link). The next three characters are the user mode bits. If the r mode bit is present ("r" instead of a hyphen), anyone with read and lookup rights in the ACL for that directory may examine that file’s contents. If the r mode bit is absent, then no one (including the directory owner) may examine the contents of the file, regardless of what permissions exist in the directory ACL. This is also true for write (w) and execute (x) permissions, although there is no ACL permission that directly corresponds to the x bit. AFS does not support write-only files.
The directory owner may change any of the mode bits using the UNIX
chmod command, although only the first three mode bits are utilized by AFS.
drwxrwxrwx 2 generic system 2048 Jun 30 12:05 .AppleDouble
-rw------- 1 generic system 10752 Jun 30 12:05 Walrus
-rw------- 1 generic system 64000 Jun 30 11:56 csmf-faq.txt
drwx------ 3 generic system 2048 Jun 30 11:57 new
drwx------ 3 generic system 2048 Jun 30 12:05 sounds1