Received-SPF: pass (google.com: best guess record for domain of linux-nfs-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Subject: Re: Does NFSv4 translate POSIX ACL's?
From:   Daniel Kobras <kobras@puzzle-itc.de>
In-Reply-To: <87bee5fc-5461-01b2-ad9d-9c60e86396c1@math.utexas.edu>
Date:   Tue, 20 Aug 2019 21:14:51 +0200
Cc:     Linux NFS Mailing List <linux-nfs@vger.kernel.org>
Message-Id: <224D3569-14EA-4533-A5DC-CD4903EF4772@puzzle-itc.de>
References: <87bee5fc-5461-01b2-ad9d-9c60e86396c1@math.utexas.edu>
To:     "Goetz, Patrick G" <pgoetz@math.utexas.edu>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Sender: linux-nfs-owner@vger.kernel.org
Precedence: bulk

Hi!

> Am 20.08.2019 um 20:35 schrieb Goetz, Patrick G <pgoetz@math.utexas.edu>:
>=20
> I have an NFSv4 exported folder (base filesystem: XFS) which must afford=
=20
> read access to a program on folders which are otherwise hidden from the=
=20
> public.  On the NFS server:
>=20
>   root@kraken:/EM/EMtifs# getfacl pgoetz
>   # file: pgoetz
>   # owner: pgoetz
>   # group: cns-cnsitlabusers
>   user::rwx
>   group::r-x
>   other::---
>   default:user::rwx
>   default:user:cryosparc_user:r-x
>   default:group::r-x
>   default:mask::r-x
>   default:other::---

There=E2=80=99s only a default ACL (which is inherited to new objects), but=
 no proper ACL on the directory itself. Have you tried

  setfacl -m u:cryosparc_user:rx

already?

Kind regards,

Daniel
--=20
Daniel Kobras
Principal Architect
Puzzle ITC Deutschland
+49 7071 14316 0
www.puzzle-itc.de


--=20
Puzzle ITC Deutschland GmbH
Sitz der Gesellschaft: Jurastr. 27/1, 72072=20
T=C3=BCbingen

Eingetragen am Amtsgericht Stuttgart HRB 765802
Gesch=C3=A4ftsf=C3=BChrer:=20
Lukas Kallies, Daniel Kobras, Mark Pr=C3=B6hl