[ros-dev] Security policy for FAT partition driver?

Phillip Susi psusi at cfl.rr.com
Fri May 13 12:22:04 CEST 2005


Mike Swanson wrote:

>Well, Reiser4 is probably an NT featureset-compatible filesystem made
>for Linux, but may also work just fine on WinNT. There already exist
>ACL hacks for both ext2 and reiserfs (v3), which would be what NT
>typically looks for.
>
>  
>
I have been reading up on reiser4 and it does look interesting. 

>This is because the ext2 filesystem doesn't contain a username, just
>the ID. Linux thinks that Frank is the owner of the file, because that
>ID is the same as the one the filesystem says it is. Windows NT (and
>many non-NT, including Linux, via ACLs) stores the username in the
>filesystem, not the ID. This also can fall into a problem where Joe is
>not the same person on two computers.
>  
>

No, NT does NOT store the username in the filesystem.  It stores 
security descriptors which contain SIDs.  The mapping of SIDs to human 
readable names is done by lsass from information either stored in the 
SAM portion of the registry, or from information obtained from a domain 
controller or active directory.  Because the SIDs are unique, the 
foreign system will not incorrectly interpret them as referring to 
someone they are not. 




More information about the Ros-dev mailing list