Exporting an NFSv4 Volume with ACLs

In an effort to improve security, you have been tasked with implementing more granular permissions on the file server. To do this, you must create a new NFS export on your test server that supports ACLs. You must export the existing /nfs to all hosts; the /nfs directory and its contents have already been configured for export. The export should be readable and writable by any host, have root squash disabled, and support use of ACLs. Once the export is properly configured, you will test it by mounting the volume locally to /mnt.

From the mounted directory, add new ACLs to the file nfstestfile to meet the following requirements:

(Note: All users belong to localdomain.)

• Allow the user alice read, write, and execute access.

• Allow the user bob read and execute access.

• Allow the user everyone read access.

Please note all necessary packages have been installed on the test server for your convenience. You only need to create the export entry.

Summary tasks list:

• Configure a new NFS export for /nfs that exports to all hosts with general read and write access, have root squash disabled, and acl enabled.

• Mount localhost:/nfs to /mnt on the local system.

• Add new ACL entries for the file /mnt/nfstestfile to meet the following requirements:

• Allow the user alice read, write access.

• Allow the user bob read and execute access.

• Allow the user everyone read access.