diff options
| author | chip <chip> | 2005-04-06 18:45:10 +0000 |
|---|---|---|
| committer | chip <chip> | 2005-04-06 18:45:10 +0000 |
| commit | 442c362b033ff30be49e162db8a57d8e375a6f1f (patch) | |
| tree | dc656dc8455b4d863c30b47c2ec40974baec07a9 /utils/exportfs | |
| parent | 3a2c185ce46190b9f4712b2432297aa04f4bdd33 (diff) | |
| download | nfs-utils-442c362b033ff30be49e162db8a57d8e375a6f1f.tar.gz nfs-utils-442c362b033ff30be49e162db8a57d8e375a6f1f.tar.xz nfs-utils-442c362b033ff30be49e162db8a57d8e375a6f1f.zip | |
Support "acl" and "no_acl" export options.
Diffstat (limited to 'utils/exportfs')
| -rw-r--r-- | utils/exportfs/exportfs.c | 2 | ||||
| -rw-r--r-- | utils/exportfs/exports.man | 15 |
2 files changed, 17 insertions, 0 deletions
diff --git a/utils/exportfs/exportfs.c b/utils/exportfs/exportfs.c index fdf5369..c7a9a0e 100644 --- a/utils/exportfs/exportfs.c +++ b/utils/exportfs/exportfs.c @@ -398,6 +398,8 @@ dump(int verbose) c = dumpopt(c, "no_subtree_check"); if (ep->e_flags & NFSEXP_NOAUTHNLM) c = dumpopt(c, "insecure_locks"); + if (ep->e_flags & NFSEXP_NOACL) + c = dumpopt(c, "no_acl"); if (ep->e_flags & NFSEXP_FSID) c = dumpopt(c, "fsid=%d", ep->e_fsid); if (ep->e_mountpoint) diff --git a/utils/exportfs/exports.man b/utils/exportfs/exports.man index d11a2a0..2b316f5 100644 --- a/utils/exportfs/exports.man +++ b/utils/exportfs/exports.man @@ -222,6 +222,21 @@ be explicitly requested with either of the synonymous .IR auth_nlm , or .IR secure_locks . +.TP +.IR no_acl +On some specially patched kernels, and when exporting filesystems that +support ACLs, this option tells nfsd not to reveal ACLs to clients, so +they will see only a subset of actual permissions on the given file +system. This option is safe for filesystems used by NFSv2 clients and +old NFSv3 clients that perform access decisions locally. Current +NFSv3 clients use the ACCESS RPC to perform all access decisions on +the server. Note that the +.I no_acl +option only has effect on kernels specially patched to support it, and +when exporting filesystems with ACL support. The default is to export +with ACL support (i.e. by default, +.I no_acl +is off). '''.TP '''.I noaccess |