4 ms·

the NFSv4 ACL Standard is tangentially related to NFS, the TL;DR is that it replicates the kind of ACLs you can create under Windows (ie, seperate "Write to Fil

by zaarn 4y ago

the NFSv4 ACL Standard is tangentially related to NFS, the TL;DR is that it replicates the kind of ACLs you can create under Windows (ie, seperate "Write to File" and "Append to File" into different permission bits, make inheritance configurable, etc.). The TrueNAS people (ixsystems) have a patch to bring it to Linux and ZFS; though from what I've heard upstream LKML lists aren't too enthused since they'd rather see this being used by an in-kernel filesystem.

trasz 4y ago
The ZFS support is there since the beginning (and used in Solaris and FreeBSD); Linux glue code is missing though.
- zaarn 4y ago
  As mentioned, there is working glue code in form of the TrueNAS patches, which you can apply yourself if you need to. The Solaris support for NFS v4 ACLs is in my experience... subpar. It doesn't really integrate with any of the tooling (not that Solaris tooling is great to begin with).
  - trasz 4y ago
    Hopefully the Linux glue code doesn’t use the richacls abomination?
    - zaarn 4y ago
      It doesn't to my knowledge. It works out of the box and integrates with Samba.
jabl 4y ago
For Linux there's the richacl's (https://en.wikipedia.org/wiki/Richacls https://en.wikipedia.org/wiki/Richacls ) which was an attempt to add NFSv4/Windows style ACL's to the Linux VFS. It never went upstream though, AFAICT largely because the VFS maintainer thought such ACL's are stupid.
- zaarn 4y ago
  The VFS maintainers are still not very warm about the idea, the current stipulation, IIRC, is that an in-tree FS should support it before it gets support from the VFS layer.