Skip to main content

Enable or disable modification of NFSv4 ACLs

Contributors netapp-thomi

When ONTAP receives a chmod command for a file or directory with an ACL, by default the ACL is retained and modified to reflect the mode bit change. You can disable the -v4-acl-preserve parameter to change the behavior if you want the ACL to be dropped instead.

About this task

When using unified security style, this parameter also specifies whether NTFS file permissions are preserved or dropped when a client sends a chmod, chgroup, or chown command for a file or directory.

The default for this parameter is enabled.

Steps
  1. Set the privilege level to advanced:

    set -privilege advanced

  2. Perform one of the following actions:

    If you want to…​

    Enter the following command…​

    Enable retention and modification of existing NFSv4 ACLs (default)

    vserver nfs modify -vserver vserver_name -v4-acl-preserve enabled

    Disable retention and drop NFSv4 ACLs when changing mode bits

    vserver nfs modify -vserver vserver_name -v4-acl-preserve disabled

  3. Return to the admin privilege level:

    set -privilege admin