Skip to content

Commit 3a8708b

Browse files
committed
nfsv4 aces/acls
1 parent adf8b8a commit 3a8708b

1 file changed

Lines changed: 8 additions & 13 deletions

File tree

docs/hpc/03_storage/08_sharing_data_on_hpc.md

Lines changed: 8 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -12,19 +12,14 @@ An Access Control List is composed of Access Control Entries, each of which has
1212
```
1313
[type]:[flags]:[principal]:[permissions]
1414
```
15-
- `type`: kind of ACE entry, we recommend only using `A` (access). Deny type entries make the ACE more complex to reason about when compared to using only access type entries for the same configuration. We strongly urge you to not use them.
16-
- `flags`: inheritance flags which apply to directories and control how ACEs are inherited, with the following available::
17-
| `f` | files inherit ACEs, but inheritance flags are not set on the files |
18-
| `d` | directories inherit both the ACE and the inheritance flags |
19-
| `i` | only inherit the inheritance flags, ACEs do not apply to this directory |
20-
| `n` | directories only inherit ACEs, not the inheritance flags and a special |
21-
and a special `g` flag that is only used when the principal is a group.
22-
- `principal`: the user or group to apply the ACE to. Note the presence of special principals `OWNER`, `GROUP` (which refer to the owner and default group) and `EVERYONE`.
23-
- `permissions`: the level of access to grant. Aliases for most common uses include:
24-
- `R`: Read, alias for `rntcy`
25-
- `W`: Write, alias for `watTNcCy`
26-
- `X`: Execute, alias for `watTNcCy`
27-
the full set of permission entry types are listed below for reference.
15+
16+
| Property | Description |
17+
| :------- | :---------- |
18+
| *type* | Kind of ACE entry, we recommend only using A (access). Deny type entries make the ACE more complex to reason about when compared to using only access type entries for the same configuration. |
19+
| *flags* | Inheritance flags which apply to directories and control how ACEs are inherited:<br/>- **`f`**: files inherit ACEs, but inheritance flags are not set on the files<br/>- **`d`**: directories inherit both the ACE and the inheritance flags<br/>- **`i`**: only inherit the inheritance flags, ACEs do not apply to this directory<br/>- **`n`**: directories only inherit ACEs, not the inheritance flags<br/>- **`g`**: only used when the principal is a group |
20+
| *principal* | The user or group to apply the ACE to, with the following special principals:<br/>- **`OWNER`**<br/>- **`GROUP`**<br/>- **`EVERYONE`** |
21+
| *permissions* | The level of access to grant. Aliases for most common uses include: the full set of permission entry types are listed below for reference, with the most commonly used options being:<br/>- **`R`**: Read, alias for `rntcy`<br/>- **`W`**: Write, alias for `watTNcCy`<br/>- **`X`**: Execute, alias for `watTNcCy` <br/> The full list of available options can be found [here](https://man7.org/linux/man-pages/man5/nfs4_acl.5.html).|
22+
2823

2924
### Creating and Applying ACLs
3025
The following commands are available:

0 commit comments

Comments
 (0)