diff --git a/docs.it4i/storage/nfs4-file-acl.md b/docs.it4i/storage/nfs4-file-acl.md index 00d69cd9179c9e9c2aa5df6257cc313da860d50a..b799ccbf557bfa4e312b038c35e9460341077c31 100644 --- a/docs.it4i/storage/nfs4-file-acl.md +++ b/docs.it4i/storage/nfs4-file-acl.md @@ -1,6 +1,6 @@ -NFSv4 ACL -================== -at the first - knowledge of ACL is necessary +# NFSv4 ACL + +At the first - knowledge of ACL is necessary ACL - access control list ACE - access control entry @@ -8,9 +8,11 @@ ACE - access control entry An NFSv4 ACL consists of one or more NFSv4 ACEs, each delimited by commas or whitespace. An NFSv4 ACE is written as a colon-delimited, 4-field string in the following format: - <type>:<flags>:<principal>:<permissions> - - +``` code +<type>:<flags>:<principal>:<permissions> +``` + +``` code [root@login2.salomon proj1]# nfs4_getfacl open-20-11 # file: open-20-11 @@ -22,25 +24,24 @@ A:fdi:OWNER@:rwaDxtTcCy A:fdi:GROUP@:rxtcy A:fdig:open-20-11@it4i.cz:rwaDxtcy A:fdi:EVERYONE@:tcy - - - * <type> - one of: - 'A' allow - 'D' deny - 'U' audit - 'L' alarm - - * <flags> - zero or more (depending on <type>) of: - 'f' file-inherit - 'd' directory-inherit - 'p' no-propagate-inherit - 'i' inherit-only - 'S' successful-access - 'F' failed-access - 'g' group (denotes that <principal> is a group) - - * <principal> - named user or group, or one of: "OWNER@", "GROUP@", "EVERYONE@" - +``` +´ +* <type> - one of: +'A' allow +'D' deny +'U' audit +'L' alarm + +* <flags> - zero or more (depending on <type>) of: +'f' file-inherit +'d' directory-inherit +'p' no-propagate-inherit +'i' inherit-only +'S' successful-access +'F' failed-access +'g' group (denotes that <principal> is a group) + +* <principal> - named user or group, or one of: "OWNER@", "GROUP@", "EVERYONE@" * <permissions> - one or more of: 'r' read-data / list-directory 'w' write-data / create-file