Table of Contents
Advertisement
Access Control Lists for Filesystems
BUI Value
Only inherit deny entries
Inherit all but "write ACL" and
"change owner"
Inherit all entries
Inherit all but "execute" when not
specified
Inherit all, but preserve mode from
client
418
Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016
CLI Value
noallow
restricted
passthrough
passthrough-x
passthrough-mode-preserve
Description
Only inheritable ACL entries
specifying "deny" permissions are
inherited.
Removes the "write_acl" and
"write_owner" permissions when
the ACL entry is inherited, but
otherwise leaves inheritable ACL
entries untouched. This is the default.
All inheritable ACL entries are
inherited. The "passthrough" mode is
typically used to cause all "data" files
to be created with an identical mode
in a directory tree. An administrator
sets up ACL inheritance so that all
files are created with a mode, such as
0664 or 0666.
Same as 'passthrough', except that
the owner, group, and everyone
ACL entries inherit the execute
permission only if the file creation
mode also requests the execute bit.
The "passthrough" setting works
as expected for data files, but you
might want to optionally include the
execute bit from the file creation
mode into the inherited ACL. One
example is an output file that is
generated from tools, such as "cc"
or "gcc". If the inherited ACL
doesn't include the execute bit,
then the output executable from the
compiler won't be executable until
you use chmod(1) to change the file's
permissions.
Inheritable ACL entries are inherited,
while preserving the creation mode
specified by the application. This
preserves the inheritance bits so
SMB creates ACLs that interoperate
well with shares accessed over NFS
and SMB simultaneously. This
property setting is only available
after applying the deferred update
for ACL Passthrough with Mode
Preservation. For more information,
see
"Deferred Updates" in Oracle
ZFS Storage Appliance Customer
Service
Manual.
Advertisement
Table of Contents
