IETF Logo Mail Archive

[nfsv4] Re: Our different approaches to draft POSIX ACL support in NFSv4

Chuck Lever III <chuck.lever@oracle.com> Fri, 26 July 2024 16:07 UTC

Return-Path: <chuck.lever@oracle.com>
X-Original-To: nfsv4@ietfa.amsl.com
Delivered-To: nfsv4@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C45EC1EBF3C for <nfsv4@ietfa.amsl.com>; Fri, 26 Jul 2024 09:07:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.105
X-Spam-Level:
X-Spam-Status: No, score=-7.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=oracle.com header.b="UeMZX8fW"; dkim=pass (1024-bit key) header.d=oracle.onmicrosoft.com header.b="QavVfQNH"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4DmUXtaG2R3B for <nfsv4@ietfa.amsl.com>; Fri, 26 Jul 2024 09:07:50 -0700 (PDT)
Received: from mx0a-00069f02.pphosted.com (mx0a-00069f02.pphosted.com [205.220.165.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8AFC8C1EBF42 for <nfsv4@ietf.org>; Fri, 26 Jul 2024 09:05:20 -0700 (PDT)
Received: from pps.filterd (m0246617.ppops.net [127.0.0.1]) by mx0b-00069f02.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 46Q8tW9m012132; Fri, 26 Jul 2024 16:04:59 GMT
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h= from:to:cc:subject:date:message-id:references:in-reply-to :content-type:content-id:content-transfer-encoding:mime-version; s=corp-2023-11-20; bh=XK/hh1E4c9AXMrMECRAdoNuchegb5MMoPSNiVxlFh 6I=; b=UeMZX8fWuVMuktNMq0w0BYKr60zhGk4xELwruJ0i7e4Wvb03G7VxwTOHk LjhLOJmOndtSzoqwDsnNw5IeeaGr+8x+GAUaPSN+82dWbDh1/5y1tzaaG8YpcXi1 DJI2ujZQEVSzIueF3NVO8EI+A77X2zoxk2z+q0EynMrLACY37tWs9LfoQz+RAn2b oJGsDXbipHIK8rU0I0dNtsQMY63F7KYyu6VGOvOLnTgSjJcGIYALR1hc/1J+LBZw IBJ34e7F5I+o11BrPa1nmwaYBbcFK3GfKyqpQrKSiY5kugW/+s8FQRo2R+ATAgcK w2jNzeptBcJ8EO92AutyltZMD8ivQ==
Received: from phxpaimrmta01.imrmtpd1.prodappphxaev1.oraclevcn.com (phxpaimrmta01.appoci.oracle.com [138.1.114.2]) by mx0b-00069f02.pphosted.com (PPS) with ESMTPS id 40hfxpp435-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Fri, 26 Jul 2024 16:04:58 +0000 (GMT)
Received: from pps.filterd (phxpaimrmta01.imrmtpd1.prodappphxaev1.oraclevcn.com [127.0.0.1]) by phxpaimrmta01.imrmtpd1.prodappphxaev1.oraclevcn.com (8.17.1.19/8.17.1.19) with ESMTP id 46QFLn47001089; Fri, 26 Jul 2024 16:04:42 GMT
Received: from nam02-dm3-obe.outbound.protection.outlook.com (mail-dm3nam02lp2041.outbound.protection.outlook.com [104.47.56.41]) by phxpaimrmta01.imrmtpd1.prodappphxaev1.oraclevcn.com (PPS) with ESMTPS id 40h26drkp0-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Fri, 26 Jul 2024 16:04:42 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=IjJV/oHtcqMTQ+rlHXHpJ1cI2pxXPdQHPKokJZ8VIBgd1oP0m7rINjOqx0kdomgh+shmy8UZ/DFmPWoraUL0flOJ4DHeCUjc7KUfGMOoVayQbHzfZ/AaeNJE1tANCsG3TtAEuuiMBaj0tJ5WshV2G03W/2Vpepge4VSEKTfllSTqkl0N4dZVluys6SWHnjuKzCj1pkl9trHifF5kqHnd8XggVsV4LqwGc6styFvgSkqnO7hy0J06lL4il3guk4115BrO6Ww6e8tcypBd2c2K0tJaBu9FeakPUrlbOm1aBZS7q8DVtMwb9X6ImFWxzNfXAx/A2AP1Mb/gdVkbmLcfNw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=XK/hh1E4c9AXMrMECRAdoNuchegb5MMoPSNiVxlFh6I=; b=GHeBr3QDu8p/yfHIkcgN1ZV5SihT06HCvNxVQzOX9MwaYLrHmwcFbQr3wH+JjjFYUBan9G6TTATO0XyqPPz4TM7NLRXv1dMmb2NdSFPgI92FvA1PBd2k5sMeyrHv8WhdsGXS2S9qE78UPTMtE0teGrHSks+rY9Szmlv/3J9a5Pu8rr88X/e+SQy70jgJHnSMkgvd6sXUfnZdONBL/AUbAlrm7qX/DQq8KOdvaS7gW22l1B1lELmbDW1LgrJ1BQr7EuFf7qLIaYFvHolJw9iGHBTeeYs5ub/F5nTFT0AzpvZjJYOhLud7r/lNHn7l4Com/riPmu6CxumVOXB1jK8Q3w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=oracle.com; dmarc=pass action=none header.from=oracle.com; dkim=pass header.d=oracle.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.onmicrosoft.com; s=selector2-oracle-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XK/hh1E4c9AXMrMECRAdoNuchegb5MMoPSNiVxlFh6I=; b=QavVfQNHTGuu6pBUGSeNhrDr3BEn3ahcdSn+Xbcf8pY7i9tQoJaCBhkvpfPYUHOt5no9Gm/x/l+mo79vbTzUGvh3oj52iOETe/l1DUBedUPgRuwGKsu6U+ds4wtIa7HoDZ2pfNOCHPFUcR4hfiYvsvltY8yZVCLfJA6pubKarzs=
Received: from BN0PR10MB5128.namprd10.prod.outlook.com (2603:10b6:408:117::24) by SA2PR10MB4523.namprd10.prod.outlook.com (2603:10b6:806:113::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.28; Fri, 26 Jul 2024 16:04:39 +0000
Received: from BN0PR10MB5128.namprd10.prod.outlook.com ([fe80::743a:3154:40da:cf90]) by BN0PR10MB5128.namprd10.prod.outlook.com ([fe80::743a:3154:40da:cf90%6]) with mapi id 15.20.7784.020; Fri, 26 Jul 2024 16:04:36 +0000
From: Chuck Lever III <chuck.lever@oracle.com>
To: David Noveck <davenoveck@gmail.com>
Thread-Topic: [nfsv4] Our different approaches to draft POSIX ACL support in NFSv4
Thread-Index: AQHa33WDfDDfrIVHQUeD1XCeliVfVQ==
Date: Fri, 26 Jul 2024 16:04:36 +0000
Message-ID: <F7648EA3-E6A1-4741-85EF-C73801E703D0@oracle.com>
References: <CADaq8jdvZ5pcFNN5zjuVHLTO30v9=2kYKzFdRxxbkTmHYZdTdA@mail.gmail.com> <CAM5tNy7Fw954gCzYHCTjRg7th_njSHhxznni48Zz4xsSXT631A@mail.gmail.com> <53DAEF45-2A4D-4066-97C2-7B09018DE99B@oracle.com> <CAM5tNy6a4ZG90i2ugXzuPqQ1zrsK9m8jLRKmv9VpnFG6m_Pqew@mail.gmail.com> <DD250FBD-A434-4294-818A-5728757CE032@oracle.com> <d1c538065728c17df66a6f9e79e55d90849fc866.camel@gmail.com> <D352FEB9-A487-4B3E-9BC8-DB2C1896F941@oracle.com> <8efc39289ecef97624622cfc431f890736b579a0.camel@hammerspace.com> <33FA1D6E-73B3-43A1-B65C-D806156E39A5@oracle.com> <cf8a48e517210512755455dd78352ae5b64f7949.camel@hammerspace.com> <449AF448-1471-47CD-B5C5-3A3A5FB9FB12@oracle.com> <2e32694382df3e70a93edcf40434a41729031e55.camel@hammerspace.com> <83c39a7b12c05b0f1a0fa6e069b08e399864277a.camel@hammerspace.com> <CADaq8jfw1FVH3dxOEJAZLrw_S5y2F6eaGkcfpha4X8BBNWgRSQ@mail.gmail.com> <6903782a95875541489844e33541114f0bf01acb.camel@hammerspace.com> <CADaq8jdFYo_DtRxS3h17dyQSFqXeoR60OjsjMM=o35HDg8ZnNg@mail.gmail.com> <855662e75c4433042fd9875c2c9c5d0244c929da.camel@hammerspace.com> <CADaq8jdZzqt-bXB4YsO=R2qpT9MNfwvSAJyBJng1qjGFTn2tbw@mail.gmail.com> <CAM5tNy5oVnyP66fzZsQXnNQcTYtpQaR59Q6io92F4LX74gPivQ@mail.gmail.com> <7FAE51A2-6E14-412F-8B0A-AC617AE4173B@oracle.com> <CADaq8je9VqYoe8StfezCNjYPD3-dGmbz-zNSO51RBmfzCPcgeA@mail.gmail.com>
In-Reply-To: <CADaq8je9VqYoe8StfezCNjYPD3-dGmbz-zNSO51RBmfzCPcgeA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.3774.600.62)
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: BN0PR10MB5128:EE_|SA2PR10MB4523:EE_
x-ms-office365-filtering-correlation-id: 6c0e1f50-c1db-496e-2692-08dcad8ca5b2
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|376014|38070700018;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BN0PR10MB5128.namprd10.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(38070700018);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: IE4WEmJ/mzad/7HKDJ1n8BQYupOv1mbWJ3qthGnmFH1CWbBIlrE+KuLMAUefDlIuMXVaemfHf2oIv9y/1CYwi2sYC0h6sSZFIgtAOotbco5pA02krLdXaS98VasIS/DUAw+P+aK4GBcUxIbeQgp1MGFsc3o9azH5QjMdf1YCL70ZeDXMfNdouhR6ul4MuYw7DY/SYS2wwEj/QvKW6Qv6A8p9bHKoZ9qPnhJIduzZhCRo1ubxQ54sRm3xz+BCEzL4ziBwcazxS9gtb5J74vpZENX9qJbHHtdnVcUJFHIjtqE3OMe2QzQl9nuc/PIpoF+LDxXLT7x3e0BWa6s6SEGifIvlmYa4zYwDka7dOuWyZVrq2raii4rVOrfiHqN5sa4oMIHFigfG1W0l2Pwm4lY+O+bshpBcdGBjq3PJe9s59zxENQvMj/NEbizGemJsN7zQHvPDlPDEaAqXXbH3mzbCnu40J9tewBqVOowZyEQY6qaUBAnHQ2ibm2gePmyxbN/d09B4MeLquSghtQM8/xWIKsvMnMruXefcGByR4pDk4KlTnkOHCQQ8QeMUutXz0dd2mzXM8Q4T806JjZTepljcbKeiSshFG3wWAhZvhxVLnAqwHtyzaFACbAWuLW8AkWA2dmylIbLL8caR+4yUwQxH46Dz2U+OggY1K7aL4PTU1yz/8kLSdfLlrv1A25PJa8fpO+zZ9VA6YfhFykNJksJo0rxQ/cdY/7g5Zg2TDvbABTiEQtkeCYuqfXBdTdxN31OKklZY03OelyaGborW8sjq1xidl+LLVDVLbcSWolVagKjLAltqY68fZ1fuAAlQoj9cwP7koz2rzU94LOQy+KIVzaTo0HF2v0jHBcb6CczY+k6dXhxEDRSG2FnZtWyW5/Ktj/iIGt+o8n7jP0qRERpUnGrJSYV9QOLbHsyFD3uqL0PsmbWsXxF75T9rkxn3Y/NezCbyzvh4x+TTLcLXvINUhdPcWNVVerQQxguHrdZ4ibl3unNYJ0gRSg4UPWBSl3Eox8rZe3q8EiZ5QkiLQxFfejfmmuRRxOpnelby0zlb3XUqI7PhrShElPPt1op5okacDqN/OKEXvGbCjOGFvOsC1lZwSlP3g38S+2xWJbLJiSdRb7J4YusARQKpgJWgt8/dsqeqQf8LPhjvLCFc/JZpaomzfoUHD+90ZKkuwCp+AuaJ4m1lroStLz/vQvLU2hge9CfDk98slCQVe9KhHi4ZZPls5XhleMuUQ8lFgB4TlSJ0oPVBgoWOmnV5583u5zwovG302GgdxiDZHa8huScXCdoOy0tIDwFQYvNZJqlN7mOdCHzjVVfzAnQR0iiORZbMsEtZnJ3/NF+jvN1E45pOPE7Ew1gsFCqSi38Tlfy5FR7Jz+qFF0/VUreb+dJDg4b4FmHzbd2s6itjhNxRVJxEL6TLwsNsp8HCd0hD1nCo4zcec8zcZTGE7IbWLF3txk6pWD7652MwoCrgDwVxLnRPNHUMC1dkj0rUon9+TroUX4F4nVHhbcchWstvIGYJkeGhbA7uP0vz+AX6FbFo7EcACkcaAsOmvQq7hOvRySGfw+ATtWPMJhI/qf8ujgfP/9cAXYEvPvXzKV8uw6khUoHNBw==
Content-Type: text/plain; charset="utf-8"
Content-ID: <FB013F35BA0CAA4F99697AC063A29AAA@namprd10.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: RW+cpjAnZ2311LJI1W35ouBohn3CU+UK40sRz9G/rXvOPHstavw7KAxJT90F80EpFsByBBiXVk7efjdloCzWGN29JObOgfOk8vOyGbF2VlAg3MX3SVkoyguWXyQzfpKVKDP5useIXWgrSvEXwV+JoB6WVNCrWr1ASqDwVZiToWM/iQrM8mcYtFI6Pz4y2PJL5rAw9q0ZVIQXjlwwB+MvhSS5dW5JsY1+f5OjF1jtD21Yc8z1HAO6L0PKgDiIIiq0vODuBK6YXLPYEjlRnL+3LXL8/o9icPwV+NHVtxMs+jcct+pZr4sUMnPsTRe4AvO3bUpAvfB7m/3ji71pTbSvWfBRO3T8zr/If/A24ZEuXTd2+ziylUwwKDceZOoTfIh+o+6JdUtGwsMumo1U+paSSNrwXaD2qaQbQl0FGZ7PTM8zKC0jBkYzJlsUcfRl+nHid5hv1HpBLHob0HS40QrjuIgRob3wNMWBOAPG1OEE7pstllQ++BAFeb5Hk3RRlQrfqpFoGOyAQgfsMVQqyZesGDhA8Bpfaq2dD60uzQYFbuSMNW8CpCPRzizoGjqfSDwElVauYUZgjW8XjuOumGwNgqw6Z34YFrUPog9CaujoSbA=
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN0PR10MB5128.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 6c0e1f50-c1db-496e-2692-08dcad8ca5b2
X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Jul 2024 16:04:36.6582 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: ah4HdDT2HJMzFrEz4gtNyVDRXbZm98aIjbhOkS469k4dMErG1NMBxvSf+EnGlIPN1dUGReTl7RNg844+Px2CyQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA2PR10MB4523
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.680,FMLib:17.12.28.16 definitions=2024-07-26_12,2024-07-26_01,2024-05-17_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 adultscore=0 mlxscore=0 suspectscore=0 spamscore=0 bulkscore=0 malwarescore=0 phishscore=0 mlxlogscore=969 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2407110000 definitions=main-2407260108
X-Proofpoint-GUID: nPXdz8LI3kREWIwEUcRJlDprZL4JjSpk
X-Proofpoint-ORIG-GUID: nPXdz8LI3kREWIwEUcRJlDprZL4JjSpk
Message-ID-Hash: BITDMEI2C2WE6IEJEY254VT26JKHD7NM
X-Message-ID-Hash: BITDMEI2C2WE6IEJEY254VT26JKHD7NM
X-MailFrom: chuck.lever@oracle.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-nfsv4.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Trond Myklebust <trondmy@hammerspace.com>, Bruce Fields <bfields@fieldses.org>, "nfsv4@ietf.org" <nfsv4@ietf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [nfsv4] Re: Our different approaches to draft POSIX ACL support in NFSv4
List-Id: NFSv4 Working Group <nfsv4.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/nfsv4/-MQI_4Oh-L8ouvrMrRD6suzS5xM>
List-Archive: <https://mailarchive.ietf.org/arch/browse/nfsv4>
List-Help: <mailto:nfsv4-request@ietf.org?subject=help>
List-Owner: <mailto:nfsv4-owner@ietf.org>
List-Post: <mailto:nfsv4@ietf.org>
List-Subscribe: <mailto:nfsv4-join@ietf.org>
List-Unsubscribe: <mailto:nfsv4-leave@ietf.org>


> On Jul 25, 2024, at 3:36 PM, David Noveck <davenoveck@gmail.com> wrote:
> 
> On Thursday, July 25, 2024, Chuck Lever III <chuck.lever@oracle.com> wrote:
> 
>> I agree there should be one per file, 
> 
> Definitely. 
> 
>> and that the server's
>> local file system should determine which type of ACL it can
>> support. 
> 
> I would think it determines the set of types  it  an support.  This can be ofen will be a singleton or the null set.
> 
>> (I don't envision a scenario where one file system
>> could support multiple types of ACLs).
>> 
> I consider it unfortunate that your vision is so limited.
> 
> I expect to face the issue in the near future since Netapp supports a considerable portion of the NFSv4 ACL model and will want to support the draft POSIX ACL.
> 
> I don't think it is reasonable to tell users that they have to get rid of their existing ACLs in order to allow them to use draft POSIX ACLs.

Hopefully this can shed a little light on the use case
that Linux NFSD might prefer -- I'm not denigrating any
other usage scenarios.

For Linux NFSD, its local file systems can store only
POSIX ACLs.

In order to provide broad compatibility with existing
and new clients, I'm thinking that NFSD will provide
GET/SETATTR capabilities that allow clients to see both
a mapped NFSv4 ACL and a POSIX ACL per file; the mapped
ACL will be created from the stored POSIX ACL to satisfy
GETATTR requests, and access authorization decisions will
be based on the stored POSIX ACL, as I believe NFSD does
today.

NFSD will map incoming NFSv4 ACLs to POSIX ACLs before
storing them. Storing either type of ACL will wholly
replace the POSIX ACL that is already there.


--
Chuck Lever

v2.26.15 | Report a Bug | By Email | System Status