From nobody Thu Feb 5 01:30:11 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4f605b1SRpz6Qxtl for ; Thu, 05 Feb 2026 01:30:11 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4f605b0r5rz3f3K for ; Thu, 05 Feb 2026 01:30:11 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1770255011; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=amLg900TQ3MDJc4pn7cTtri9NoVCDTkhF2NHDtS5TFc=; b=f7Rykk/XmefI6kcrJdNMNWSxoOs+uPSwkatIU+KzgWZHn3ueZosKEy3zR/JEGuKXaiaNka jsL5EXMb0/xWGE4A+dnGTLGGZS3ydxWWmaVhR72fQweNgtgui6Ra/6DLjCGzdVEaXiXSMO BcTVPpdIlSw2Esil7K67U4suVoUEzJAkxpyjWPPf4fM53gqMwxm+e+6qgxnW0pE3IteuuH A74MBlCiHnJS+iria2DoP6bQ7l/31XH2ukRfn4LxuC/godBk9NNsDLLUpV07/DPDbkc3/4 nfDy9q9AC50mDf9MWlbtv29apjMGc2FkJTiVhqZV4MqIMrwbaqmV3aKlcDTfcA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1770255011; a=rsa-sha256; cv=none; b=doJwSrF1BGMSuPYrSUFHfZzMmUTd+eSapDhSeCz6rdcjTG4ME2+TVh7j79S/MjElyGnMBC kJT+UUpjkCgmAxvh+zPliOdjuvUPVRT6/04NXLCdnmKi1PJkdmkxONJv5V1XWsAA4NzoLI 52zEwe15tX61BxDsCoxVlq2WEzY+aod86sWlJk3asrhfEP5pU7UNthWVFRwJkmL6rKuu7C SCXEDvhmjiN9YYvo11/7skirVzMocuSb9KpZUa9ARpPYC3RiKT8oO348wPlfeYg1tFnUvc UNzcs88V+x+bpnE/tkgIev449pTLihwuQCZbBLpgDn9k6+owv/7EpLcCxswNOQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1770255011; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=amLg900TQ3MDJc4pn7cTtri9NoVCDTkhF2NHDtS5TFc=; b=DJndOFmScvIan3KakLHsYYxz33ULmDrna4fzGnAz/2zF1icPfWcAcN2+YPgL9kBFSZx+vq a9HG8mrsUi+cgTOeSzeVNtFmM1GWBRhZ9vV+/zQ2bwdAJJhhMQyzKg1ze+5BZOk65lM6sX oNkRfT1WnD/NQek8qtaXWDKSOv06BtQq3MgeKGLS4MEnv1Ikc46beYpzOoB+XqyGcvj3UC RJbnr6JuPGFlGa+WDkfkq/Hnjyc47wqB4HXepHpijdpfhtivveapYhIxla4tmTGDb/I3sO Y7oJqRyp2PJm4ut7xmkNQsIzZp2mCDAk4TBCiky08yXFyAyeTJ+4arypJcM7pQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4f605b0JwFz1MBt for ; Thu, 05 Feb 2026 01:30:11 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 3920e by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Thu, 05 Feb 2026 01:30:11 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Rick Macklem Subject: git: 144c1eda3973 - stable/15 - nfs: Add some support for POSIX draft ACLs List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: rmacklem X-Git-Repository: src X-Git-Refname: refs/heads/stable/15 X-Git-Reftype: branch X-Git-Commit: 144c1eda397330eeb79cd6fe312f80f5d3f1952f Auto-Submitted: auto-generated Date: Thu, 05 Feb 2026 01:30:11 +0000 Message-Id: <6983f2a3.3920e.6823530@gitrepo.freebsd.org> The branch stable/15 has been updated by rmacklem: URL: https://cgit.FreeBSD.org/src/commit/?id=144c1eda397330eeb79cd6fe312f80f5d3f1952f commit 144c1eda397330eeb79cd6fe312f80f5d3f1952f Author: Rick Macklem AuthorDate: 2025-12-22 23:22:09 +0000 Commit: Rick Macklem CommitDate: 2026-02-05 01:29:11 +0000 nfs: Add some support for POSIX draft ACLs An internet draft (expected to become an RFC someday) https://datatracker.ietf.org/doc/draft-ietf-nfsv4-posix-acls describes an extension to NFSv4.2 to handle POSIX draft ACLs. This is the final patch in the series that enables the extension of NFSv4.2 to support POSIX draft ACLs. At this time, only UFS mounted with the "acls" option will work, and only for FreeBSD built with these patches. Patches for client and server for the Linux kernel are in the works. (I'll admit my next little project is cleaning the Linux patches up for submission for upstream.) To make these changes really useful, the FreeBSD port of OpenZFS needs to be patched to add POSIX draft ACL support. (Support for POSIX draft ACLs is already in the Linux port of OpenZFS.) Interopeability with NFSv4.2 clients and servers that do not support this extension should not be a problem. (cherry picked from commit e35191ccf3b3bdf02905f7e11dc0dd4796593c07) --- sys/fs/nfs/nfsproto.h | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git a/sys/fs/nfs/nfsproto.h b/sys/fs/nfs/nfsproto.h index 41150ef88188..6e67c5be3416 100644 --- a/sys/fs/nfs/nfsproto.h +++ b/sys/fs/nfs/nfsproto.h @@ -1208,7 +1208,11 @@ struct nfsv3_sattr { NFSATTRBM_SUPPATTREXCLCREAT | \ NFSATTRBM_CLONEBLKSIZE | \ NFSATTRBM_CHANGEATTRTYPE | \ - NFSATTRBM_XATTRSUPPORT) + NFSATTRBM_XATTRSUPPORT | \ + NFSATTRBM_ACLTRUEFORM | \ + NFSATTRBM_ACLTRUEFORMSCOPE | \ + NFSATTRBM_POSIXDEFAULTACL | \ + NFSATTRBM_POSIXACCESSACL) /* * These are the set only attributes. @@ -1238,7 +1242,9 @@ struct nfsv3_sattr { NFSATTRBM_TIMEMODIFYSET) #define NFSATTRBIT_SETABLE2 \ (NFSATTRBM_MODESETMASKED | \ - NFSATTRBM_MODEUMASK) + NFSATTRBM_MODEUMASK | \ + NFSATTRBM_POSIXDEFAULTACL | \ + NFSATTRBM_POSIXACCESSACL) /* * NFSATTRBIT_NFSV41 - Attributes only supported by NFSv4.1. @@ -1259,7 +1265,11 @@ struct nfsv3_sattr { (NFSATTRBM_CLONEBLKSIZE | \ NFSATTRBM_CHANGEATTRTYPE | \ NFSATTRBM_XATTRSUPPORT | \ - NFSATTRBM_MODEUMASK) + NFSATTRBM_MODEUMASK | \ + NFSATTRBM_ACLTRUEFORM | \ + NFSATTRBM_ACLTRUEFORMSCOPE | \ + NFSATTRBM_POSIXDEFAULTACL | \ + NFSATTRBM_POSIXACCESSACL) /* * Set of attributes that the getattr vnode op needs.