|
|  |
Native NFSv4 ACLs for Linux XFS & NFS
Features
This project provides end-to-end native NFSv4 ACL support in Linux
XFS and NFS. The following features are provided:
Kernel
- An API for handling NFSv4 ACLs (independent of filesystem).
- VFS and NFS server changes to allow filesystems to correctly enforce NFSv4 ACL semantics
- Support for storing and enforcing NFSv4 ACLs on ext3 filesystems
- Support for storing and enforcing NFSv4 ACLs on XFS filesystems
- NFS client support for getting and setting ACLs with the commandline utility
- NFS server support for getting and setting ACLs from clients
Userspace
- An API for handling NFSv4 ACLs in userspace
- A commandline utility for getting and setting ACLs
- Test cases
License
All the code written for this project is licensed under the GNU GPL version 2
(or GPL version 3 in the case of the Samba patches).
Download
Releases
GIT Trees
Publications
- Implementing Native NFSv4 ACLs in Linux,
talk at Linux.conf.au 2009,
slides.
Status
As of January 2009 the status of the various parts of this project are
- VFS: believed complete and correct
- XFS in SGI's ISSP product (against SLES10 base): passes all tests
- XFS mainline (against 2.6.25-rc3 base): some test failures
- ext3: passes all tests
- NFS server: passes almost all tests
- NFS client: untested
- Userspace utility and library: working
Due to organisational changes in December 2008, the project on
indefinite hold. The source has been provided for your enjoyment
and in the hope that someone will continue this work.
Contact
If you have any questions, please either email
v4acls-external@els.sgi.com (unfortunately
this list is not archived and requires confirmation to join) or join us on
#v4acls at freenode .
References
- Andreas Grünbacher, Native NFSv4 Access Control Lists on Linux
- Andreas Grünbacher, NFSv4 ACLs in POSIX
- Andreas Grünbacher, J. Bruce Fields, NFSv4 file_masks Attribute
- IBM Corp., GPFS 3.1 Adminstration and Programming Reference
- Sun Microsystems Corp., Solaris ZFS Administration Guide
- Spencer Shepler, Brent Callaghan et al, RFC3530: Network File System (NFS) version 4 Protocol
- Spencer Shepler, Brent Callaghan et al, NFS Version 4 Minor Version 1 draft 29
- Microsoft Corp., How Security Identifiers Work
- Microsoft Corp., How Security Descriptors and Access Control Lists Work
- Undocumented NT Internals website
|  |
|
|