zlacker

[parent] [thread] 6 comments
1. zaarn+(OP)[view] [source] 2022-06-21 08:30:58
the NFSv4 ACL Standard is tangentially related to NFS, the TL;DR is that it replicates the kind of ACLs you can create under Windows (ie, seperate "Write to File" and "Append to File" into different permission bits, make inheritance configurable, etc.).

The TrueNAS people (ixsystems) have a patch to bring it to Linux and ZFS; though from what I've heard upstream LKML lists aren't too enthused since they'd rather see this being used by an in-kernel filesystem.

replies(2): >>trasz+h1 >>jabl+G9
2. trasz+h1[view] [source] 2022-06-21 08:43:34
>>zaarn+(OP)
The ZFS support is there since the beginning (and used in Solaris and FreeBSD); Linux glue code is missing though.
replies(1): >>zaarn+5d
3. jabl+G9[view] [source] 2022-06-21 10:16:29
>>zaarn+(OP)
For Linux there's the richacl's (https://en.wikipedia.org/wiki/Richacls ) which was an attempt to add NFSv4/Windows style ACL's to the Linux VFS. It never went upstream though, AFAICT largely because the VFS maintainer thought such ACL's are stupid.
replies(1): >>zaarn+Uc
◧◩
4. zaarn+Uc[view] [source] [discussion] 2022-06-21 10:55:20
>>jabl+G9
The VFS maintainers are still not very warm about the idea, the current stipulation, IIRC, is that an in-tree FS should support it before it gets support from the VFS layer.
◧◩
5. zaarn+5d[view] [source] [discussion] 2022-06-21 10:56:28
>>trasz+h1
As mentioned, there is working glue code in form of the TrueNAS patches, which you can apply yourself if you need to. The Solaris support for NFS v4 ACLs is in my experience... subpar. It doesn't really integrate with any of the tooling (not that Solaris tooling is great to begin with).
replies(1): >>trasz+Nz
◧◩◪
6. trasz+Nz[view] [source] [discussion] 2022-06-21 13:45:34
>>zaarn+5d
Hopefully the Linux glue code doesn’t use the richacls abomination?
replies(1): >>zaarn+sM
◧◩◪◨
7. zaarn+sM[view] [source] [discussion] 2022-06-21 14:56:32
>>trasz+Nz
It doesn't to my knowledge. It works out of the box and integrates with Samba.
[go to top]