[nfsv4] Native NFSv4 ACLs on Linux

Andreas Gruenbacher <agruen@suse.de> Fri, 14 July 2006 14:35 UTC

Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1G1Ol1-0007Lo-QO; Fri, 14 Jul 2006 10:35:07 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1G1Ol0-0007Lj-DJ for nfsv4@ietf.org; Fri, 14 Jul 2006 10:35:06 -0400
Received: from cantor2.suse.de ([195.135.220.15] helo=mx2.suse.de) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1G1Oky-0007Fo-1q for nfsv4@ietf.org; Fri, 14 Jul 2006 10:35:06 -0400
Received: from Relay2.suse.de (mail2.suse.de [195.135.221.8]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx2.suse.de (Postfix) with ESMTP id CAD991EC1B; Fri, 14 Jul 2006 16:35:01 +0200 (CEST)
From: Andreas Gruenbacher <agruen@suse.de>
Organization: Novell, SUSE Labs
To: nfsv4@ietf.org, nfs@lists.sourceforge.net
Date: Fri, 14 Jul 2006 16:37:32 +0200
User-Agent: KMail/1.9.1
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200607141637.32246.agruen@suse.de>
X-Spam-Score: 0.0 (/)
X-Scan-Signature: b19722fc8d3865b147c75ae2495625f2
Cc:
Subject: [nfsv4] Native NFSv4 ACLs on Linux
X-BeenThere: nfsv4@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: nfsv4@ietf.org
List-Id: NFSv4 Working Group <nfsv4.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/nfsv4>, <mailto:nfsv4-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/nfsv4>
List-Post: <mailto:nfsv4@ietf.org>
List-Help: <mailto:nfsv4-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/nfsv4>, <mailto:nfsv4-request@ietf.org?subject=subscribe>
Errors-To: nfsv4-bounces@ietf.org

Hello,

This is to announce a prototype that implements NFSv4 ACLs natively on Linux. 
So far, the implementation supports NFSv4 ACLs on Ext3 filesystems. The code 
is functional, but hasn't seen a whole lot of testing so far.

NFSv4 ACLs per se do not map to the POSIX permission model and the extension 
mechanisms that POSIX allows very well. Different designs to extend the 
definition of NFSv4 ACLs in order to make them map better to POSIX have been 
proposed. A conclusion which design to adopt for NFSv4 Minor Version 1 has 
not been reached so far. See the nfsv4@ietf.org mailing list 
(http://www1.ietf.org/mailman/listinfo/nfsv4) for discussions.

This prototype features a design that is relatively close to POSIX 1003.1e 
draft 17 ACLs as implemented on many flavors of UNIX. Until a formal design 
document is available, please refer to the discussion in the following two 
threads on the nfsv4@ietf.org mailing list, and read the code: 

  NFSv4 ACL and POSIX interaction / mask
    http://www1.ietf.org/mail-archive/web/nfsv4/current/msg03268.html

  NFSv4 ACL and POSIX interaction / mask, draft-ietf-nfsv4-acls-00 not ready
    http://www1.ietf.org/mail-archive/web/nfsv4/current/msg03286.html

The prototype itself is available at http://www.suse.de/~agruen/nfs4acl/, 
along with some more information.

Regards,
Andreas

-- 
Andreas Gruenbacher <agruen@suse.de>
Novell / SUSE Labs

_______________________________________________
nfsv4 mailing list
nfsv4@ietf.org
https://www1.ietf.org/mailman/listinfo/nfsv4