Firstly, the owner module of iptables doesn't seem to be working? for me. I personally give it a 83% probability that it is a problem with my understanding of either iptables or ulm. I like this functionality as I can keep users, apache, etc from connecting to smtp ports but allow my mail software, I can keep someone from running a proxy cgi but still allow users to surf, etc..

# iptables -A OUTPUT -m owner --uid-owner 0 -j ACCEPT
iptables: No chain/target/match by that name

I am usually running the "Latest 2.4 Series" kernel. Tested it on
linux-2.4.21-djc1-6um (uname says 5um ) and I receive the same as the above. http://kernels.usermodelinux.org/kernel ... dot-config shows it enabled. This isn't a really big problem for me, just something I'd like (I'd also like patch-portacl, a million dollars, a key to the safe, hugh petro muscles, etc.)

Next request, ACLs on Ext2 & Ext3 would be neat, but by no means required... or even hardly needed. The RedHat distributions already include the needed libraries (libacl, libattr, coreutils) so it shouldn't take much, at least for RedHat.

These request all fall under the "it'd be cool, but I can definitely live without" categary.... except for the fake muscles.

Kenny