[nfsv4] [FYI] NFSv4 ACLs on Linux: Design Documentation

Andreas Gruenbacher <agruen@suse.de> Wed, 06 September 2006 14:55 UTC

Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1GKyoG-0003ZG-S0; Wed, 06 Sep 2006 10:55:24 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1GKyoF-0003Yg-Ow for nfsv4@ietf.org; Wed, 06 Sep 2006 10:55:23 -0400
Received: from mx2.suse.de ([195.135.220.15]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1GKyoE-0000A1-EO for nfsv4@ietf.org; Wed, 06 Sep 2006 10:55:23 -0400
Received: from Relay1.suse.de (mail2.suse.de [195.135.221.8]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx2.suse.de (Postfix) with ESMTP id E301C1F9AE for <nfsv4@ietf.org>; Wed, 6 Sep 2006 16:55:07 +0200 (CEST)
From: Andreas Gruenbacher <agruen@suse.de>
Organization: Novell, SUSE Labs
To: nfsv4@ietf.org
Date: Wed, 06 Sep 2006 16:59:28 +0200
User-Agent: KMail/1.9.1
MIME-Version: 1.0
Content-Disposition: inline
X-Length: 1531
X-UID: 114
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Message-Id: <200609061659.28633.agruen@suse.de>
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 8abaac9e10c826e8252866cbe6766464
Subject: [nfsv4] [FYI] NFSv4 ACLs on Linux: Design Documentation
X-BeenThere: nfsv4@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: NFSv4 Working Group <nfsv4.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/nfsv4>, <mailto:nfsv4-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/nfsv4>
List-Post: <mailto:nfsv4@ietf.org>
List-Help: <mailto:nfsv4-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/nfsv4>, <mailto:nfsv4-request@ietf.org?subject=subscribe>
Errors-To: nfsv4-bounces@ietf.org

I have the design documentation for the Linux implementation of NFSv4 ACLs 
reasonably complete now; it is available at:

  http://www.suse.de/~agruen/nfs4acl/
      draft-gruenbacher-nfsv4-acls-in-posix-00.html

The first part of the document discusses how NFSv4 ACLs relate to POSIX. The 
second part describes algorithms which can be used to implement NFSv4 ACLs in 
a POSIX compliant way.

This design is based on file masks as proposed in [1]. Independent of that, 
the algorithm to apply a file mode to an ACL can be used whether or not file 
masks are used.

The code at http://www.suse.de/~agruen/nfs4acl/ is a complete and functional 
implementation of this design.

I would like to encourage people to have a look at the design document as well 
as the implementation.


Regards,
Andreas


[1] A. Gruenbacher and J. Fields: NFSv4 file_masks Attribute,
    http://www.ietf.org/internet-drafts/
      draft-gruenbacher-nfsv4-file-masks-00.txt

-- 
Andreas Gruenbacher <agruen@suse.de>
Novell / SUSE Labs

_______________________________________________
nfsv4 mailing list
nfsv4@ietf.org
https://www1.ietf.org/mailman/listinfo/nfsv4