Re: [nfsv4] draft-quigley-nfsv4-labeled-00 - some comments

[Nico Williams <[e-mail]>]

On Thu, Apr 7, 2011 at 10:31 AM, Thomas Haynes <[e-mail]> wrote:
> On Apr 7, 2011, at 9:43 AM, Nico Williams wrote:
>> I think a problem only arises for directory delegations if the server
>> would allow a subject to READDIR a directory while also at the same
>> time hiding some of the directory entries from that subject due to the
>> subject not being authorized to see them.  If we don't allow such
>> behavior then there's no problem.
>>
>
> The problem being of course that the client could create an entry that
> conflicts with a name already on the server?

No, that a user, "joe", on a multi-user client could see an entry
named "Covert operations in Foobania.doc" that he was not allowed to
see but that another user, "jane", on that client was allowed to see.
Conversely, if "joe" was first to readdir that directory then "jane"
won't see that directory entry whereas she should.

The simplest fix is to say that all names in a given directory have
the same label as the directory itself, even though the named objects
themselves might have different labels.

Nico
--