Re: [ros-dev] Security policy for FAT partition driver?

[Robert Shearman]

Phillip Susi wrote:

>   Robert Köpferl wrote:
>
> >   So coming back to ext?.
> >  There exists a rather good implementation for WinNT: 
> >  http://www.fs-driver.org/index.html
> >  better than the italian one. So what's the source of ROS's ext2-IFS 
> >  in SVN?
> >  Did we already contact the programmer of the mentioned ext2-ifs?
> >  Maybe he is willing to add ACL and owner-support and a Posix-EA <-> 
> >  IBM-EA mapping to his implementation and work with us? 
>
>  To my knowledge, ext has no way to store NT security descriptors.  You 
>  may be able to write a hack that say, stores all the descriptors in 
>  one file, and then has to search that file for the corresponding 
>  descriptor for every other file on the volume you try to access, but 
>  that is an ugly hack. 

You can do it the same way Samba does it by using xattrs. It's a shame 
that so few ReactOS developers turned up to WineConf as the Samba team 
did a presentation on this.

>  
> >   Multiple File streams. NTFS is (looking at the
> > mentioned table) the 
> >  only FS capable of that feature. But what is it? It is just some 
> >  semantic to actually hide files having a colon it their name (more 
> >  less). So such feature can be easyly simulated by a ROS-IFS. OK, 
> >  there are issues with attributes which then exist several times. But 
> >  this is in my opinion a minor problem, since no corruption by other 
> >  OSs can occour (as in FAT).
> >  And be honest. Who uses this feature?  MS' AppleTalk-Server AND some 
> >  Virus that hides in another stream. 
>
>  A number of features use data streams including offline files, EFS, on 
>  the fly compressed files, and the summary property sheet that lets 
>  users associate information with files including the author, revision, 
>  description, and search keywords.   

Again, you can use xattrs.

>   There is also the file OBJID feature and reparse
> points.  I am sure 
>  there are more things that rely on this feature that I am forgetting 
>  about, and I am also sure that there are several nice features that we 
>  could implement in the future using streams, so yes, it is something 
>  that we want to support. 

Now you're scraping the barrel.

Rob