nixCraft

Hi all,

Anyone knows how to make files or folder invisible in NFS exports?
In samba there's an option veto files...this will make certain files or directories invisible and unaccessible but I dont have idea in NFS. Looks like there are no equivalent options in NFS...?

Thanks for any help..
Warren

Use chmod and chgrp/chown command to setup permission on files. For example only root should allow to see folder foo:

nfs bases its access control to files on the server machine on the uid and gid provided in each NFS RPC request. The normal behavior a user would expect is that she can access her files on the server just as she would on a normal file system. This requires that the same uids and gids are used on the client and the server machine.

In short use NIS to give same UID,GID to both client/server to permission works nicely.

__________________
Rocky Jr.
You may have my body & soul, but you will never touch my pride!

If you have knowledge, let others light their candles at it.

Certified to work on HP-UX / Sun Solaris / RedHat

thanks for the reply.
So the point is we just set the permission of the file in which only the root have access. What I mean is that when the client mounts the exported fs, certain files/folders would be totally invisible to him.
ex:
/etc/exports
/mnt/nfs *(rw,root_squash,secure,sync,no_wdelay)

-bash-3.00# mkdir test
-bash-3.00# chmod 0700 test
-bash-3.00# chown root:root test
-bash-3.00# ls -l
total 1
drwx------ 2 root root 1024 Apr 10 17:35 test

When the nfs client mounts it, he can still see the folder "test" but have no access. My problem is how this folder will become hidden to him.
I tried hiding this folder but the client may still able to see if he set his browser to show hidden files.

Under UNIX/Linux you need to add . (dot) to hide directory. To hide dir called docs rename it as .docs:

__________________
Friends - v-nessa - missyAdmin - LinuxChix

yes, hiding will partially work but if the clients set his browser to show all hidden files or "ls -a" then he's still able to see it all.
something like veto in samba but there's no equivalent option in nfs. acls might do a trick for this.

yup acls might do a trick for this but note that ACL is not supported by all Linux/UNIX NFS client, especially the nfs 2 clients. But you can force all client to use nfs v3 or higher