сам себе отвечу
в исходниках
/usr/src/sys/sys/acl.h
есть вот параметр
#define ACL_MAX_ENTRIES 32 /* maximum entries in an ACL */
этот параметр как раз и ограничивает кол-во ACL
Пробовал изменить этот параметр на значение больше 32, с пересборкой ядра и системы, привело к "permishen denied" на все папки с aclвот ещё, нашёл обсуждение этого вопроса ещё в 2003!! году
в двух словах, когда нибудь это будет! :)
> On Wed, 5 Mar 2003, Skye Poier wrote:
> Whoa the list lives :)
> I have a question too, in struct acl:
>
> struct acl {
> int acl_cnt;
> struct acl_entry acl_entry[ACL_MAX_ENTRIES];
> };
>
>
> How/why was 32 chosen for ACL_MAX_ENTRIES? Is it a limitation of UFS
> ext attrs?
32 was selected as a reasonable-looking number. I don't remember
off-hand, but I seem to recall IRIX uses 16 or 32. The justification for
a fixed bound was that originally, UFS ACLs had to have a fixed,
documented maximum size. They can now be substantially larger, and I have
been thinking about modifying the kernel code to support variable length
ACLs using an ACL pointing to an array of ACL Entries rather than
including the array. However, this will require a bit of work, and
require us to be careful about ABI issues.
> Robert N M Watson FreeBSD Core Team, TrustedBSD Projects
> robert (at) fledge.watson (dot) org [email concealed]
> Network Associates Laboratories
> To Unsubscribe: send mail to majordomo (at) trustedbsd (dot)
> org [email concealed]
> with "unsubscribe trustedbsd-discuss" in the body of the
> message
Вариант для распечатки
Информационная безопасность (Public)
(??) on 19-Окт-06, 16:26 
