ACL's on 4.1

ACL's on 4.1

[Trishali Nayar]

Hi all,

Looking at the 4.1 RFC, there are some additional 'Access_mask' and 
'Ace-flag' when compared to 4.0.
 
- Access_mask:
ACE4_WRITE_RETENTION
ACE4_WRITE_RETENTION_HOLD

- Ace-flag :
ACE4_INHERITED_ACE
 
But are these supported by 4.1 clients and servers? If you do 'man 
nfs4_acl' it does not seem to show these additional ones. So how do we 
set/get them?

Also, are there any other differences from an ACL perspective between 4.0 
and 4.1?
 
Your insights will be really useful.
 
Thanks and regards,
Trishali.

Re: ACL's on 4.1

[J. Bruce Fields]

On Tue, Jun 16, 2020 at 07:35:55PM +0530, Trishali Nayar wrote:
> Hi all,
> 
> Looking at the 4.1 RFC, there are some additional 'Access_mask' and 
> 'Ace-flag' when compared to 4.0.
>  
> - Access_mask:
> ACE4_WRITE_RETENTION
> ACE4_WRITE_RETENTION_HOLD
> 
> - Ace-flag :
> ACE4_INHERITED_ACE
>  
> But are these supported by 4.1 clients and servers?

These are optional.  Linux knfsd does not support them.  I'm not sure
what if any servers do.  If someone was interested in adding client-side
support, it would probably not be hard to add it to nfs4-acl-tools.

--b.

> If you do 'man 
> nfs4_acl' it does not seem to show these additional ones. So how do we 
> set/get them?
> 
> Also, are there any other differences from an ACL perspective between 4.0 
> and 4.1?
>  
> Your insights will be really useful.
>  
> Thanks and regards,
> Trishali.