This is possibly the dumbest question I have asked ever, but how do you
set ACLs on files within a ZFS filesystem?
Trying to use setfacl(1) diverts me to the acl(5) manpage; well, I know
that I need to use NFSv4 style ACLs, but where is the utility to do so?
This is on Solaris 10 Update 2.
Thanks,
Ceri
--
That must be wonderful! I don''t understand it at all.
-- Moliere
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
URL:
<http://mail.opensolaris.org/pipermail/zfs-discuss/attachments/20061121/e3cfa5bb/attachment.bin>
On Tue, Nov 21, 2006 at 12:59:51PM +0000, Ceri Davies wrote:> This is possibly the dumbest question I have asked ever, but how do you > set ACLs on files within a ZFS filesystem? > > Trying to use setfacl(1) diverts me to the acl(5) manpage; well, I know > that I need to use NFSv4 style ACLs, but where is the utility to do so? > > This is on Solaris 10 Update 2.Hi Ceri:) As I understand this setfacl(1) is only used for POSIX-like ACLs implemented in UFS. Currently prefered way is to use chmod(1) where you can set both POSIX-like ACL (for UFS) and NFSv4 ACL (for NFSv4 and ZFS). -- Pawel Jakub Dawidek http://www.wheel.pl pjd at FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 187 bytes Desc: not available URL: <http://mail.opensolaris.org/pipermail/zfs-discuss/attachments/20061121/35ad377b/attachment.bin>
Ceri Davies wrote:> This is possibly the dumbest question I have asked ever, but how do you > set ACLs on files within a ZFS filesystem? > > Trying to use setfacl(1) diverts me to the acl(5) manpage; well, I know > that I need to use NFSv4 style ACLs, but where is the utility to do so?chmod(1). The setfacl(1) man page should make this clearer in the text at the top. Please file a man page bug via http://bugs.opensolaris.org/ -- Darren J Moffat
Hi Ceri, On Tue, 2006-11-21 at 12:59 +0000, Ceri Davies wrote:> This is possibly the dumbest question I have asked ever, but how do you > set ACLs on files within a ZFS filesystem?No such thing as stupid questions - only stupid answers :-) The manpage for setfacl(1) points to chmod(1) - which is the way you should set ACLs on ZFS. There''s more at http://opensolaris.org/os/community/zfs/docs/ which points to the ZFS Admin guide (Chapter 7 is the one you want) and the chmod man page. cheers, tim -- Tim Foster, Sun Microsystems Inc, Solaris Engineering Ops http://blogs.sun.com/timf
On Tue, Nov 21, 2006 at 01:34:02PM +0000, Darren J Moffat wrote:> Ceri Davies wrote: > >This is possibly the dumbest question I have asked ever, but how do you > >set ACLs on files within a ZFS filesystem? > > > >Trying to use setfacl(1) diverts me to the acl(5) manpage; well, I know > >that I need to use NFSv4 style ACLs, but where is the utility to do so? > > chmod(1).OK, thanks.> The setfacl(1) man page should make this clearer in the text at the top. > > Please file a man page bug via http://bugs.opensolaris.org/What''s the corresponding snv_ release? Ceri -- That must be wonderful! I don''t understand it at all. -- Moliere -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 187 bytes Desc: not available URL: <http://mail.opensolaris.org/pipermail/zfs-discuss/attachments/20061121/3bdda7e7/attachment.bin>
On Tue, Nov 21, 2006 at 02:32:31PM +0100, Pawel Jakub Dawidek wrote:> On Tue, Nov 21, 2006 at 12:59:51PM +0000, Ceri Davies wrote: > > This is possibly the dumbest question I have asked ever, but how do you > > set ACLs on files within a ZFS filesystem? > > > > Trying to use setfacl(1) diverts me to the acl(5) manpage; well, I know > > that I need to use NFSv4 style ACLs, but where is the utility to do so? > > > > This is on Solaris 10 Update 2. > > Hi Ceri:) > > As I understand this setfacl(1) is only used for POSIX-like ACLs > implemented in UFS. Currently prefered way is to use chmod(1) where you > can set both POSIX-like ACL (for UFS) and NFSv4 ACL (for NFSv4 and ZFS).Thanks Pawel :) Ceri -- That must be wonderful! I don''t understand it at all. -- Moliere -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 187 bytes Desc: not available URL: <http://mail.opensolaris.org/pipermail/zfs-discuss/attachments/20061121/710dc370/attachment.bin>
On Tue, Nov 21, 2006 at 02:00:06PM +0000, Tim Foster wrote:> Hi Ceri, > > On Tue, 2006-11-21 at 12:59 +0000, Ceri Davies wrote: > > This is possibly the dumbest question I have asked ever, but how do you > > set ACLs on files within a ZFS filesystem? > > No such thing as stupid questions - only stupid answers :-)You don''t know me that well :)> The manpage for setfacl(1) points to chmod(1) - which is the way you > should set ACLs on ZFS.It does, but only in SEE ALSO. I''d expected something useful from acl(5), which I now see is actually there already. Doh. Thanks, Ceri -- That must be wonderful! I don''t understand it at all. -- Moliere -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 187 bytes Desc: not available URL: <http://mail.opensolaris.org/pipermail/zfs-discuss/attachments/20061121/81db56e4/attachment.bin>
Ceri Davies wrote:> This is possibly the dumbest question I have asked ever, but how do you > set ACLs on files within a ZFS filesystem?I think you will find chmod(1) very helpful here. cheers, calum.
Ceri Davies wrote:> On Tue, Nov 21, 2006 at 01:34:02PM +0000, Darren J Moffat wrote: >> Ceri Davies wrote: >>> This is possibly the dumbest question I have asked ever, but how do you >>> set ACLs on files within a ZFS filesystem? >>> >>> Trying to use setfacl(1) diverts me to the acl(5) manpage; well, I know >>> that I need to use NFSv4 style ACLs, but where is the utility to do so? >> chmod(1). > > OK, thanks. > >> The setfacl(1) man page should make this clearer in the text at the top. >> >> Please file a man page bug via http://bugs.opensolaris.org/ > > What''s the corresponding snv_ release?Which ever one it is that you are running. uname -v tells you that. -- Darren J Moffat
On Tue, Nov 21, 2006 at 02:22:53PM +0000, Darren J Moffat wrote:> Ceri Davies wrote: > >On Tue, Nov 21, 2006 at 01:34:02PM +0000, Darren J Moffat wrote: > >>Ceri Davies wrote: > >>>This is possibly the dumbest question I have asked ever, but how do you > >>>set ACLs on files within a ZFS filesystem? > >>> > >>>Trying to use setfacl(1) diverts me to the acl(5) manpage; well, I know > >>>that I need to use NFSv4 style ACLs, but where is the utility to do so? > >>chmod(1). > > > >OK, thanks. > > > >>The setfacl(1) man page should make this clearer in the text at the top. > >> > >>Please file a man page bug via http://bugs.opensolaris.org/ > > > >What''s the corresponding snv_ release? > > Which ever one it is that you are running.As I said in my original post, I''m not running OpenSolaris but Solaris 10 Update 2. Ceri -- That must be wonderful! I don''t understand it at all. -- Moliere -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 187 bytes Desc: not available URL: <http://mail.opensolaris.org/pipermail/zfs-discuss/attachments/20061121/27137bdf/attachment.bin>
On 21/11/06, Darren J Moffat <Darren.Moffat at sun.com> wrote:> Ceri Davies wrote: > > This is possibly the dumbest question I have asked ever, but how do you > > set ACLs on files within a ZFS filesystem? > > > > Trying to use setfacl(1) diverts me to the acl(5) manpage; well, I know > > that I need to use NFSv4 style ACLs, but where is the utility to do so? > > chmod(1). > > The setfacl(1) man page should make this clearer in the text at the top. > > Please file a man page bug via http://bugs.opensolaris.org/Would it also be worth pointing that out in whatever is generating the message from setfacl(1) (and getfacl) itself? vera boot # cd /boot vera boot # df -h $(pwd) Filesystem size used avail capacity Mounted on tank/b49_root 36G 729M 32G 3% / vera boot # getfacl x86.miniroot-safe File system doesn''t support aclent_t style ACL''s. See acl(5) for more information on Solaris ACL support. -- Rasputin :: Jack of All Trades - Master of Nuns http://number9.hellooperator.net/
Ceri Davies wrote:> On Tue, Nov 21, 2006 at 02:22:53PM +0000, Darren J Moffat wrote: >> Ceri Davies wrote: >>> On Tue, Nov 21, 2006 at 01:34:02PM +0000, Darren J Moffat wrote: >>>> Ceri Davies wrote: >>>>> This is possibly the dumbest question I have asked ever, but how do you >>>>> set ACLs on files within a ZFS filesystem? >>>>> >>>>> Trying to use setfacl(1) diverts me to the acl(5) manpage; well, I know >>>>> that I need to use NFSv4 style ACLs, but where is the utility to do so? >>>> chmod(1). >>> OK, thanks. >>> >>>> The setfacl(1) man page should make this clearer in the text at the top. >>>> >>>> Please file a man page bug via http://bugs.opensolaris.org/ >>> What''s the corresponding snv_ release? >> Which ever one it is that you are running. > > As I said in my original post, I''m not running OpenSolaris but > Solaris 10 Update 2.There isn''t a corresponding snv_ release that would be an s10_ release but just log it against snv_52 as the man pages there are still the same. -- Darren J Moffat
On Nov 21, 2006, at 08:32, Pawel Jakub Dawidek wrote:> On Tue, Nov 21, 2006 at 12:59:51PM +0000, Ceri Davies wrote: >> This is possibly the dumbest question I have asked ever, but how >> do you >> set ACLs on files within a ZFS filesystem? >> >> Trying to use setfacl(1) diverts me to the acl(5) manpage; well, I >> know >> that I need to use NFSv4 style ACLs, but where is the utility to >> do so? >> >> This is on Solaris 10 Update 2. > > Hi Ceri:) > > As I understand this setfacl(1) is only used for POSIX-like ACLs > implemented in UFS. Currently prefered way is to use chmod(1) where > you > can set both POSIX-like ACL (for UFS) and NFSv4 ACL (for NFSv4 and > ZFS).QFS/SAM[Q]FS implements this too, but ZFS doesn''t support the aclent_t style POSIX 1003.1c/1003.1e draft 17(?) ACLs and went towards the NFSv4 ACL Sam, Lisa, and Mark {Falkner, Weeks, Shellenbaum} have much more to say on this sort of thing .. check their blogs and the draft .. start with Mark''s here: http://blogs.sun.com/marks/entry/zfs_acls .je