NFSv4 mount configurations

[J. Bruce Fields]

On Wed, Jun 20, 2007 at 04:17:43PM +0200, Zoltan Menyhart wrote:
> Kevin Coffman wrote:
> 
> > I'm probably missing something, but what is the reason that users
> > should be restricted to mounting only their partition rather than the
> > whole exports tree?
> > 
> > K.C.
> 
> Well, a client of ours thinks he needs this additional security feature.
> As you might have guessed, I am new on these security related issues.
> I was not able to tell him if it could be done or not.
> I try to set up a demo for him...
> 
> Is masking some items out of the export tree is allowed by the design?

Not in the way you're trying to do it.  I think what you want to do is
better done with traditional file permissions (owner, group, mode, acl,
etc.).

--b.