0

How can I reset the ACLs on a ZFS file system on OpenIndiana that is exported via NFS4 and replace it with inherited permissions? Basically, I want to do the equivalent of icacls "C:\path\to\folder" /reset /T /C on Windows on this machine. However, neither the chmod command on OpenIndiana nor the nfs4_setacl seems to allow for deleting all ACLs although the client correctly interprets inherited ACLs if a node does not have an own one.

3

You can remove all non trivial ACLs in ZFS with the following: chmod A- filename

Source: Solaris ZFS Administration Guide: Using ACLs and Attributes to Protect ZFS Files

  • chmod A- replaces the ACL with a default ACL representing the permission bits. I want to remove the ACL completely. – Christoph Jan 14 '11 at 16:22
  • That is precisely what "chmod A-" is doing. The "default ACL representing the permission bits" is precisely what you got with a file having no ACL set. – jlliagre Jan 17 '11 at 0:47
  • But if I use Windows on the SMB share, I can also remove also the default ACL and it still works on all OSes. If I investigate the ACLs via Windows, there is a difference: when using chmod A-, the ACL is not inherited. – Christoph Jan 18 '11 at 10:39
0

You might also want to set 'aclinherit' peoperty on zfs volume:

zfs set aclinherit=passthrough tank/volume

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.