ACLs for CIFS/SMB shares [PSARC/2008/641 FastTrack timeout 10/27/2008]

Nicolas Williams Nicolas.Williams at sun.com
Mon Oct 20 10:40:29 PDT 2008


On Mon, Oct 20, 2008 at 11:25:28AM -0600, Doug McCallum wrote:
> >NFS supports share ACLs of a sort now in the form of host/negroup lists.
> >
> >Shouldn't CIFS also support such an ACL mechanism?
> >  
> The NFS host based access control will be putback into Nevada in build 102.

Er, NFS has had it forever.  Do you mean that CIFS will also have it in
build 102?  If so, that's really cool.

> >I pointed out that NFS has a notion of shares and share ACLs, but I see
> >that the notion of share ACLs for CIFS is based on Windows file ACLs, as
> >opposed to the NFS share-ACL-as-host/netgroup-list that we have now.
> >
> >In NFS there's no TreeConnect-type operation, but a share-level ACL can
> >still be applied in operations that deal with paths.
> 
> Correct.

Can we expect to see a future case adding share-level ACLs (beyond
host-based ACLs) to the NFS server?



More information about the opensolaris-arc mailing list