From e55d1b751789d1ee3ff967f1640b7807c115f403 Mon Sep 17 00:00:00 2001 From: Jan Siwiec <jan.siwiec@vsb.cz> Date: Wed, 9 Jun 2021 08:39:31 +0000 Subject: [PATCH] Update nfs4-file-acl.md --- docs.it4i/storage/nfs4-file-acl.md | 51 +++++++++++++++--------------- 1 file changed, 26 insertions(+), 25 deletions(-) diff --git a/docs.it4i/storage/nfs4-file-acl.md b/docs.it4i/storage/nfs4-file-acl.md index 00d69cd91..b799ccbf5 100644 --- a/docs.it4i/storage/nfs4-file-acl.md +++ b/docs.it4i/storage/nfs4-file-acl.md @@ -1,6 +1,6 @@ -NFSv4 ACL -================== -at the first - knowledge of ACL is necessary +# NFSv4 ACL + +At the first - knowledge of ACL is necessary ACL - access control list ACE - access control entry @@ -8,9 +8,11 @@ ACE - access control entry An NFSv4 ACL consists of one or more NFSv4 ACEs, each delimited by commas or whitespace. An NFSv4 ACE is written as a colon-delimited, 4-field string in the following format: - <type>:<flags>:<principal>:<permissions> - - +``` code +<type>:<flags>:<principal>:<permissions> +``` + +``` code [root@login2.salomon proj1]# nfs4_getfacl open-20-11 # file: open-20-11 @@ -22,25 +24,24 @@ A:fdi:OWNER@:rwaDxtTcCy A:fdi:GROUP@:rxtcy A:fdig:open-20-11@it4i.cz:rwaDxtcy A:fdi:EVERYONE@:tcy - - - * <type> - one of: - 'A' allow - 'D' deny - 'U' audit - 'L' alarm - - * <flags> - zero or more (depending on <type>) of: - 'f' file-inherit - 'd' directory-inherit - 'p' no-propagate-inherit - 'i' inherit-only - 'S' successful-access - 'F' failed-access - 'g' group (denotes that <principal> is a group) - - * <principal> - named user or group, or one of: "OWNER@", "GROUP@", "EVERYONE@" - +``` +´ +* <type> - one of: +'A' allow +'D' deny +'U' audit +'L' alarm + +* <flags> - zero or more (depending on <type>) of: +'f' file-inherit +'d' directory-inherit +'p' no-propagate-inherit +'i' inherit-only +'S' successful-access +'F' failed-access +'g' group (denotes that <principal> is a group) + +* <principal> - named user or group, or one of: "OWNER@", "GROUP@", "EVERYONE@" * <permissions> - one or more of: 'r' read-data / list-directory 'w' write-data / create-file -- GitLab