Skip to content
Snippets Groups Projects
Commit e55d1b75 authored by Jan Siwiec's avatar Jan Siwiec
Browse files

Update nfs4-file-acl.md

parent 71f00a1a
No related branches found
No related tags found
1 merge request!323extended-acls-storage-section
NFSv4 ACL # NFSv4 ACL
==================
at the first - knowledge of ACL is necessary At the first - knowledge of ACL is necessary
ACL - access control list ACL - access control list
ACE - access control entry ACE - access control entry
...@@ -8,9 +8,11 @@ ACE - access control entry ...@@ -8,9 +8,11 @@ ACE - access control entry
An NFSv4 ACL consists of one or more NFSv4 ACEs, each delimited by commas or whitespace. An NFSv4 ACL consists of one or more NFSv4 ACEs, each delimited by commas or whitespace.
An NFSv4 ACE is written as a colon-delimited, 4-field string in the following format: An NFSv4 ACE is written as a colon-delimited, 4-field string in the following format:
<type>:<flags>:<principal>:<permissions> ``` code
<type>:<flags>:<principal>:<permissions>
```
``` code
[root@login2.salomon proj1]# nfs4_getfacl open-20-11 [root@login2.salomon proj1]# nfs4_getfacl open-20-11
# file: open-20-11 # file: open-20-11
...@@ -22,25 +24,24 @@ A:fdi:OWNER@:rwaDxtTcCy ...@@ -22,25 +24,24 @@ A:fdi:OWNER@:rwaDxtTcCy
A:fdi:GROUP@:rxtcy A:fdi:GROUP@:rxtcy
A:fdig:open-20-11@it4i.cz:rwaDxtcy A:fdig:open-20-11@it4i.cz:rwaDxtcy
A:fdi:EVERYONE@:tcy A:fdi:EVERYONE@:tcy
```
´
* <type> - one of: * <type> - one of:
'A' allow 'A' allow
'D' deny 'D' deny
'U' audit 'U' audit
'L' alarm 'L' alarm
* <flags> - zero or more (depending on <type>) of: * <flags> - zero or more (depending on <type>) of:
'f' file-inherit 'f' file-inherit
'd' directory-inherit 'd' directory-inherit
'p' no-propagate-inherit 'p' no-propagate-inherit
'i' inherit-only 'i' inherit-only
'S' successful-access 'S' successful-access
'F' failed-access 'F' failed-access
'g' group (denotes that <principal> is a group) 'g' group (denotes that <principal> is a group)
* <principal> - named user or group, or one of: "OWNER@", "GROUP@", "EVERYONE@" * <principal> - named user or group, or one of: "OWNER@", "GROUP@", "EVERYONE@"
* <permissions> - one or more of: * <permissions> - one or more of:
'r' read-data / list-directory 'r' read-data / list-directory
'w' write-data / create-file 'w' write-data / create-file
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment