We are planning to implement ACL on our Linux platform. Only one particular group is going to come under ACL. This group would have at the max 20 users. All of the restrictions would be at directory level (not at file name level) Would this show any impact on the server's performance/responsiveness?
+2
A:
Not really, the overhead is insignificant. This is the case for ACL scehemes that are network based and those that are entirely local machine based.
Hassan Syed
2010-03-02 16:06:31
+2
A:
The time complexity depends on the ACL For instance SELInux and AppArmor have more overhead than traditional file permissions. However, many secuirty systems in the linux kernel have a time complexity of O(1), which is lowest time complexity possible and it means that there is no additional overhead.
Rook
2010-03-02 16:57:03
That's what I really wanted to say :D Nice reply to the comment as well.
Hassan Syed
2010-03-02 17:07:46
@Hassan Hah, thanks.
Rook
2010-03-02 17:13:48