System.Security.AccessControl Unix implementation

[ianhays]

It may be worth looking into providing an implementation of AccessControl on Unix. It would at least be nice to have some control over basic RWX permissions for user/group/all, or we could go deeper with getfacl and setfacl. Most of the things on Windows would likely have to be left out as it would be too far a stretch to map them to anything on Unix, but it's worth considering regardless.

discussion started in dotnet/corefx#8930.

[niemyjski]

Right now I'm having issues installing https://www.nuget.org/packages/System.Security.AccessControl/ on xamarin projects because it references windows specific functionality that fails to install (Win32 + ..Principal.Windows). I wonder how many people are hitting these kinds of issues where they think this stuff will work xplat and it doesn't.

[niemyjski]

@GiriSr ^^ Should I create a new issue

[ianhays]

@danmosemsft

[karelz]

We need API proposal -- will likely be involved.

[JeremyKuhne]

There are two security buckets here. One is that there are actual ACL implementations (such as what ships with RedHat Linux), but there is no standard Unix wide. We could implement against the various ACL implementations and perhaps be able to leverage the existing API surface, but that isn't certain.

One other approach that we should consider is creating a simple Least-Common-Denominator access API to allow people to create files and directories with "All Users" and "Just Me" which is a concept we can do in Windows and Unix (i.e. chmod).