- Fix acl(2) by handling deny ACEs at all.
- Implement the POSIX 1003.1e functions (maybe simply in terms of
the existing Solaris API).
- Add missing Solaris ACL functions (acl_get, facl_get, acl_set, facl_set,
acl_fromtext, acl_totext, acl_free, acl_strip, acl_trivial).
- Add Solaris NFSv4 ACLs, which, coincidentally, are almost equivalent
to Windows ACLs. This would work nicely for NTFS ACLs, of course.
See http://docs.sun.com/app/docs/doc/819-2252/acl-5?l=en&a=view
- Last but not least: Actually handle "mask".