>Another issue is, do we need file-level ACLs? would directory-granularity 
   >ACL's (a la AFS) meet most peoples' requirements? 



this doesn't cut it for me.  in my past, i used to chacl my tty so that
only my friends could talk(1) and write(1) to me, but no one else.  on
other systems since, i've just run "mesg n".


.mrg.