1

Currently, I have a file in NFS where it has the permissions,

A::OWNER@:rwaDxtTcCy
A::GROUP@:rwaDxtcy
A::EVERYONE@:rwaDxtcy
A:fdi:OWNER@:rwaDxtTcCy
A:fdi:GROUP@:rxtcy
A:fdi:EVERYONE@:tcy

However, now I want to perform something equivalent as

setfacl -m g::--- filename

to remove the GROUP permissions.

I tried using:

nfs4_setfacl -x "A::GROUP@:rwaDxtcy" filename
nfs4_setfacl -x 2 filename
nfs4_setfacl -m A::GROUP@:rwaDxtcy A::GROUP@:tcy filename

All of them didn't change the permission for GROUP@ at all.

However, one thing I noticed while playing around with nfs4_setfacl is, if I run

nfs4_setfacl -a D::GROUP@:rwaDx filename

This will remove the permissions for GROUP@, however, it will also removes the permission for the OWNER@ as well, which is not what I want.

D::OWNER@:rwaDx
A::OWNER@:tTcCy
A::GROUP@:tcy
D::GROUP@:rwaDx
A::EVERYONE@:rwaDxtcy
A:fdi:OWNER@:rwaDxtTcCy
A:fdi:GROUP@:rxtcy
A:fdi:EVERYONE@:tcy

Does anyone know how to just remove ACL permission for GROUP@?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.