RFC 5661 NFS ACL权限管理（6.4.2）

最新推荐文章于 2025-07-03 19:35:26 发布

转载最新推荐文章于 2025-07-03 19:35:26 发布 · 382 阅读

NAS 同时被 2 个专栏收录

10 篇文章

订阅专栏

NFS

3 篇文章

订阅专栏

本文探讨了服务器上Mode和ACL属性的使用情况，包括两种不同类型的服务器实现方式：一种是仅依赖Mode属性进行权限管理的无ACL对象服务器，另一种则是始终存在ACL属性的服务器。对于前者，获取ACL属性时，服务器会返回与Mode属性不冲突的ACL；对于后者，服务器至少存储Mode的高三位，并确保Mode的低九位与ACL一致。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

本章节应用于同时支持Mode和ACL属性的服务器。

This section applies only to servers that support both the mode and ACL attributes.
有些服务器有这么一种名词：无ACL对象。意思是权限的授予和拒绝通过Mode属性实施，而不是通过ACL属性。如果从这个服务器上获取ACL属性，服务器需要回复ACL与Mode不匹配。即，ACL需要与mode的低9位匹配。
Some server implementations may have a concept of "objects without ACLs", meaning that all permissions are granted and denied according to the mode attribute and that no ACL attribute is stored for that object. If an ACL attribute is requested of such a server, the server SHOULD return an ACL that does not conflict with the mode; that is to say, the ACL returned SHOULD represent the nine low-order bits of the mode attribute (MODE4_R*, MODE4_W*, MODE4_X*) as described in Section 6.3.2.

其他服务器，ACL属性一直都伴随每一个对象。例如服务器必须至少保存mode的高三位（MODE4_SUID, MODE4_SGID, MODE4_SVTX）。服务器在接收到获取mode请求后，需要返回mode属性，并且低九位必须与ACL属性保持一致。

For other server implementations, the ACL attribute is always present for every object. Such servers SHOULD store at least the three highorder bits of the mode attribute (MODE4_SUID, MODE4_SGID, MODE4_SVTX). The server SHOULD return a mode attribute if one is requested, and the low-order nine bits of the mode (MODE4_R*, MODE4_W*, MODE4_X*) MUST match the result of applying the method in Section 6.3.2 to the ACL attribute.