Beginnings of acl (POSIX.1e draft 17) verification support

- if built with --with-acl, check that files and directories don't have
  any extra acl's set
- for now, any acl beyond the regular unix permission set is reported as
  file mode difference as the acl's cannot have been set by rpm itself
- patch from Andreas Gruenbacher, modified to use libacl instead of raw
  xattrs for portability, BUT atm this uses non-portable acl_equiv_mode()
  Linux libacl extension, the posix draft doesn't seem to have much in
  the way of comparing entries :-/

1 files changed, 4 insertions, 0 deletions

diff --git a/system.h b/system.h
index 5a3c64dbd..3818e12dd 100644
--- a/system.h
+++ b/system.h
@@ -231,6 +231,10 @@ void * _free(void * p)
 #include <sys/capability.h>
 #endif
 
+#if WITH_ACL
+#include <acl/libacl.h>
+#endif
+
 /**
  * Wrapper to free(3), permit NULL, return NULL. 
  * For documenting cases where const is used to protect long-lived