NFS Export Permissions vs POSIX Permissions Question

Question

Hello, I'm trying to better understand the nuances between NFS Export and POSIX permissions, and how the configuring of Export Client types (e.g., Root, Read Only, and Read Write Clients) might impact access to data. If I have a NFS Export which has a Read Write Client configured (IP: 1.2.3.4) that is not connecting to the configured path as the path's owner or group member, could this Client still access the Export path with these read+write permissions? Also, if there are files maintained in the path that are chmod'ed to 640 (-rw-r-----), would the POSIX permissions be the authoritative permissions and block the ability for the Client to read content (given other users do not have the POSIX read permission), or would the fact that the client is a 'Read Write Client' permit it to read/modify those files, even though the POSIX permissions would not technically permit that? Thank you in advance for your help!

DELL-Josh Cr · Accepted Answer

Hi,

Just to check, do the links still not work if you are logged in? NFS export by itself is not enough and it is possible for someone to have POSiX access and not have NFS Export access. https://dell.to/3vAM6co https://dell.to/37rD0H7

DELL-Josh Cr · Answer

Hi,

Thanks for your question about the permissions work. If there are ACL permissions POSIX are ignored. https://dell.to/384I9Vo and more detail here https://dell.to/3uXzBIX

Let us know if you need anything else or have any additional questions.

cajunclay · Answer

Thank you, Josh! Looks like I don't have the necessary permissions to those KBs. This would be in the case of no ACLs, would a NFS Export Read Write Client's permissions trump POSIX?

Isilon

Was this post helpful?