From 826681bfbc57195b0e7af25b6bdd86d0b2fa69ef Mon Sep 17 00:00:00 2001 From: "https://me.yahoo.com/a/9zLlJoF0r.ojMdGY_UGr3x2uSjAmDe0HewSrWQ--#1e40f" Date: Sun, 28 Aug 2011 02:07:52 -0700 Subject: [PATCH] --- AFSLore/UsageFAQ.mdwn | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/AFSLore/UsageFAQ.mdwn b/AFSLore/UsageFAQ.mdwn index 01d3f26..5c72de8 100644 --- a/AFSLore/UsageFAQ.mdwn +++ b/AFSLore/UsageFAQ.mdwn @@ -497,4 +497,5 @@ When the ACL on a directory is set to "irl", this creates what is called a "drop In practice, the "not modify them once deposited" part is not enforced by the fileserver; only the [[OpenAFS]] client enforces this restriction. Thus, you should not depend on this for security. -Also, note that system:anyuser=irl has additional problems: because dropbox semantics are based on pts identities (see question 2.21), the fileserver cannot distinguish between two unauthenticated users. So, not only can a user come back days later and modify the "dropped" file, but **any** user can modify a file dropped by an unauthenticated user, at any time. +Also, note that system:anyuser=irl has additional problems: because dropbox semantics are based on pts identities (see question 2.21), the fileserver cannot distinguish between two unauthenticated users. So, not only can a user come back days later and modify the "dropped" file, but **any** user can modify a file dropped by an unauthenticated user, at any time. [Mobil Keluarga Terbaik di Indonesia](http://bisnis-inter-net.com/mobil-keluarga-terbaik-di-indonesia/) [TOP 1 Oli Sintetik Mobil-Motor Indonesia](http://bisnis-inter-net.com/top-1-oli-sintetik-mobil-motor-indonesia/) [Bisnis Internet](http://bisnis-inter-net.com/) + -- 1.9.4