Received-SPF: pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   trondmy@kernel.org
To:     Anna Schumaker <anna.schumaker@netapp.com>
Cc:     linux-nfs@vger.kernel.org
Subject: [PATCH 0/3] Export the NFSv4.1 'dacl' and 'sacl' attributes
Date:   Sat, 14 May 2022 10:36:57 -0400
Message-Id: <20220514143700.4263-1-trondmy@kernel.org>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Precedence: bulk

From: Trond Myklebust <trond.myklebust@hammerspace.com>

This patch series allows the NFSv4 client to also export the NFSv4.1
'dacl' and 'sacl' attributes.
The main differences with respect to the existing NFSv4 'acl' attribute
are:

1) by splitting out the 'sacl' component, the server is free to enforce
   stronger privilege requirements against users that want to read or
   modify the sacl auditing features, while still allowing ordinary
   users to read and modify the 'dacl'.
2) Support for automatic inheritance of acls.

These two differences do mean that the acl tools will need some
modifications in order to make use of the new functionality.

Trond Myklebust (3):
  NFSv4: Specify the type of ACL to cache
  NFSv4: Add encoders/decoders for the NFSv4.1 dacl and sacl attributes
  NFSv4.1: Enable access to the NFSv4.1 'dacl' and 'sacl' attributes

 fs/nfs/nfs4proc.c       | 137 +++++++++++++++++++++++++++++++++-------
 fs/nfs/nfs4xdr.c        |  95 ++++++++++++++++++----------
 include/linux/nfs4.h    |   2 +
 include/linux/nfs_xdr.h |  10 +++
 4 files changed, 189 insertions(+), 55 deletions(-)

-- 
2.36.1