[755] in Info-AFS_Redistribution
mail & afs
daemon@ATHENA.MIT.EDU (Michael Niksch)
Fri May 8 14:05:33 1992
Date: Fri, 8 May 92 17:54:20 SET
From: "Michael Niksch" <nik@zurich.ibm.com>
To: Info-AFS@transarc.com
Ref: Note from Bob_Dew%alw.nih.gov AT CARNEGIE.BITNET
> Fine--except that /afs/cellname/spool/mail is readable by all mail
> recipients? That is, everybody can read everybody elses mail? Until
> per file acls are available, I don't think this is a good idea.
NO, YOU OUGHT TO READ IT MORE CAREFULLY:
/usr/spool/mail/nik -> /afs/.../mail/nik -> /afs/.../mail/.nik/spoolfile
That means the each spoolfile is actually in a directory of its own, called
/afs/.../mail/.<user>
and this directory has the proper ACL. That the symbolic link is two-step
is because this will eventually allow to make the link one level higher
/usr/spool/mail -> /afs/.../mail
and it will be easy to streamline as soon as we get file level ACLs.
Michael Niksch
