User Tools

Site Tools


linux:acls

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision Both sides next revision
linux:acls [2016/02/09 15:41]
jansen [Interaction between ACLs and traditional UNIX permissions]
linux:acls [2017/03/29 11:23]
jansen
Line 51: Line 51:
 ACLs on remote disks (nfs) ACLs on remote disks (nfs)
  
-The description above is for ACLs on local disks. Luckily, there is ACl support in the network file system too. For nfs3 (currently only still in use on our last RedHat 5 servers), ACls can be set and read as on local disks. Nfs4 (default on RHEL6 & 7 and Fedora > 14) comes with its own ACL implementation,​ unfortunately. There are good reasons for the nfs developers to do that, but it is a bit of a drawback in our case. To manipulate ACLs on a remote disk, users will now have to know on what Linux version that disk resides, and if it is one of the newer versions, they have to use different tools to do the work.+===== ACLs on remote disks ===== 
 + 
 +The description above is for ACLs on local disks. Luckily, there is ACL support in the network file system too. Nfs4 (default on RHEL6 & 7 and Fedora > 14) comes with its own ACL implementation, ​which is unfortunately ​a little bit more complex. There are good reasons for the nfs developers to do that, but it is a bit of a drawback in our case. To manipulate ACLs on a remote disk, users have to use different tools to do the work.
  
 To read ACL info on a nfs4 disk, use nfs4_getfacl,​ eg: To read ACL info on a nfs4 disk, use nfs4_getfacl,​ eg:
Line 71: Line 73:
 Here is an example using nfs4_setfacl:​ Here is an example using nfs4_setfacl:​
   nfs4_setfacl -a '​A:​fd:​sfinx@strw.leidenuniv.nl:​rwaDxtTcCy'​ /​net/​eendracht/​data1/​acl_test   nfs4_setfacl -a '​A:​fd:​sfinx@strw.leidenuniv.nl:​rwaDxtTcCy'​ /​net/​eendracht/​data1/​acl_test
-This will give the user '​sfinx'​ approximately the same permissions as rthe owner of the directory (check with ''​nfs4_getfacl''​ to verify).+This will give the user '​sfinx'​ approximately the same permissions as the owner of the directory (check with ''​nfs4_getfacl''​ to verify).
linux/acls.txt · Last modified: 2019/07/16 07:36 by jansen