client acl tools

J. Bruce Fields bfields at fieldses.org
Thu Oct 26 14:59:20 EDT 2006


I've updated the acl patch:

	http://www.citi.umich.edu/projects/nfsv4/linux/acl-patches/2.2.41-1/acl-2.2.41-CITI_NFS4_ALL-1.dif

to *remove* the nfs4_setfacl and nfs4_getfacl commands.  Those are
instead provided by a separate package, thanks to David Richter and
Alexis MacKenzie:

	http://www.citi.umich.edu/projects/nfsv4/linux/nfs4-acl-tool-tarballs/nfs4-acl-tool-20061025.tar.gz

Future versions of both will be available from

	http://www.citi.umich.edu/projects/nfsv4/linux

Recent versions of the server accept a wider range of NFSv4
ACLs--they're still mapping between NFSv4 and POSIX ACLs, but it should
be possible to use nfs4_setfacl and nfs4_getfacl against recent linux
servers (whereas old servers were difficult to use without a tool to
perform the mapping from posix acls to NFSv4 acls).

We may still maintain the patched posix commands for a while, though, at
least for the benefit of anyone using an "old" linux server.  Other
changes for the most recent version of those patches include:

	- Fix handling of inherited ACEs: the calculated ACL mustn't
	  completely replace the existing ACL: instead, setting the
	  default ACL should only replace the iherited ACEs (leaving any
	  effective permissions untouched), and setting the access ACL
	  should only modify effective ACEs (leaving any inherited stuff
	  alone).
	- Support the acl_extended_file function, so "ls -l" can show
	  that neat plus sign after the unix permissions if additional
	  ACLs are set (from Christophe Saout <christophe at saout.de>)
	- Remove some unnecessary accessor functions.
	- Fix some style problems.

--b.


More information about the NFSv4 mailing list