Skip to content
Snippets Groups Projects
Commit ca22d0bc authored by Jan Siwiec's avatar Jan Siwiec
Browse files

Update nfs4-file-acl.md

parent 2a1a481e
No related branches found
No related tags found
1 merge request!323extended-acls-storage-section
Hide whitespace changes
Inline Side-by-side
docs.it4i/storage/nfs4-file-acl.md
+ 36
− 41
View file @ ca22d0bc
# NFSv4 ACL NFSv4 ACL
An NFSv4 ACL consists of one or more NFSv4 ACEs (Access Control Entry), each delimited by a comma or whitespace. An NFSv4 ACL consists of one or more NFSv4 ACEs (Access Control Entry), each delimited by a comma or whitespace.
...@@ -10,52 +10,47 @@ An NFSv4 ACE is written as a colon-delimited, 4-field string in the following fo ...@@ -10,52 +10,47 @@ An NFSv4 ACE is written as a colon-delimited, 4-field string in the following fo
## ACE Elements ## ACE Elements
<ol> `<type>` - one of:
<li> `<type>` - one of:
| Flag | Name | | Flag | Name |
| ---- | ----- | | ---- | ----- |
| A | allow | | A | allow |
| D | deny | | D | deny |
| U | audit | | U | audit |
| L | alarm | | L | alarm |
</li> `<flags>` - zero or more (depending on `<type>`) of:
<li>`<flags>` - zero or more (depending on `<type>`) of:
| Flag | Name | | Flag | Name |
| ---- | ------------------------------------------- | | ---- | ------------------------------------------- |
| f | file-inherit | | f | file-inherit |
| d | directory-inherit | | d | directory-inherit |
| p | no-propagate-inherit | | p | no-propagate-inherit |
| i | inherit-only | | i | inherit-only |
| S | successful-access | | S | successful-access |
| F | failed-access | | F | failed-access |
| g | group (denotes that <principal> is a group) | | g | group (denotes that <principal> is a group) |
</li> `<principal>` - named user or group, or one of: `OWNER@`, `GROUP@`, `EVERYONE@`
</ol>
3. `<principal>` - named user or group, or one of: `OWNER@`, `GROUP@`, `EVERYONE@` `<permissions>` - one or more of:
4. `<permissions>` - one or more of: | Flag | Name |
| ---- | --------------------------------- |
| Flag | Name | | r | read-data / list-directory |
| ---- | --------------------------------- | | w | write-data / create-file |
| r | read-data / list-directory | | a | append-data / create-subdirectory |
| w | write-data / create-file | | x | execute |
| a | append-data / create-subdirectory | | d | delete |
| x | execute | | D | delete-child (directories only) |
| d | delete | | t | read-attrs |
| D | delete-child (directories only) | | T | write-attrs |
| t | read-attrs | | n | read-named-attrs |
| T | write-attrs | | N | write-named-attrs |
| n | read-named-attrs | | c | read-ACL |
| N | write-named-attrs | | C | write-ACL |
| c | read-ACL | | o | write-owner |
| C | write-ACL | | y | synchronize |
| o | write-owner |
| y | synchronize |
## Example ## Example
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment