NFS shared directory permission (rhel6)

夜神 岩男 supergiantpotato at yahoo.co.jp
Mon Aug 1 12:33:36 UTC 2011


On 08/01/2011 05:23 PM, Jatin K wrote:
> Dear all
>
> what should be the permission of NFS shared directory on RHEL6 ???
>
> I've shared a directory on rhel 6  ...following are the configuration done
>
> created a directory /office
>
> --/etc/exports----
> /office *.officebox.local(rw,sync)
>
>
>
> ---ls -ld /office
>
> drwxr-xr-x. 3 root root 4096 Aug  1 13:44 /office
>
>
> problem :-  all the clients in officebox.local can mount the nfs shared
> directory on localsystem  but it always mounted as read-only  ...even
> though /etc/exports configured with read and write
>
> I'm able to solve this problem by changing permission and set it to 777
> ..... but this is not desirable
>
> is it compulsory to set permission to 777  ... what is the batter
> solution ?????

NFSv4 has become both more awesome and more complex.
Before getting into specific issues that can cause this...

What is the output of "ls -Zl" from within the share (/office, right?) 
from a user account? (not root) It is not enough to just see that 
/office is owned by root (particularly if you are checking from the root 
account).

Also, is /office being used as an alternative /home location or is it 
being used as just a common share for data?

In addition to the ownership, the SELinux context can be important 
(please don't tell me you went the "just turn it off" route!). What is 
the output of "ls -Zl" on the server side of the share, both the main 
share directory and inside the directory.

What is the output of "getsebool -a" on the server side?

And... are you running LDAP or NIS/NIS+, Kerberos or anything else 
interesting for authentication/authorization on your network?
These are a huge help but also a huge subject to cram into a week of 
marathon self-study if you're not familiar with them already... that is 
if you really want to understand them and not just follow a howto 
without comprehending half of what you're doing.

-Iwao


More information about the users mailing list