How /etc/exports works

Specifying root access in /etc/exports

About root access

After the root user on a client mounts a resource, depending on the specifications in the /etc/exports file, the root user might be

Able to access the resource with UID 0
Able to access the resource with a nonroot UID
Denied access

Specifying the same root access restriction for all clients

For all clients to have root access

To give all clients root access, complete the following step.

Step	Action
1	Enter the path name of the resource with the `anon` option. Example /vol/vol0/home -anon=0 Result The root user on any client can access the /vol/vol0/home directory with UID 0.

For no clients to have root access

To deny root users on all clients access to the resource, complete the following step.

Step	Action
1	Enter the path name of the resource with the `anon` option. Example /vol/vol0/home -anon=65535 Result No root users on clients who have mounted the /vol/vol0/home directory can access the directory.

For all clients to be considered nonroot users

To have root users on all clients be considered nonroot users when accessing the resource, complete the following step.

Step	Action
1	Enter the path name of the resource with the `anon` option. Example /vol/vol0/home -anon=65530 Note The UID specified must not be 0. Result All root users on clients who have mounted the /vol/vol0/home directory access the directory with UID 65530.

For root users on all clients to be considered nobody

To have root users on all clients access the resource as nobody, complete the following step.

Step	Action
1	Enter the path name of the resource with the `anon` option. Example /vol/vol0/home -anon=65534 Result All users on clients who have mounted the /vol/vol0/home directory can access the directory with UID 65534, which is the UID for a special user named nobody.

Specifying that some users have root access

For some clients to have root access and others no root access

To have the root users on some clients retain the root UID and give others no root access, complete the following step.

Step	Action
1	Enter the path name of the resource with the `root` and `anon` options. Example /vol/vol0/home -root=host1:host2,anon=65535 Result Root users on host1 and host2 access the /vol/vol0/home directory as root and root users on other clients are denied access.

For root users on some clients to have root access and others nonroot access

To have users on some clients retain the root UID and give others a nonzero UID, complete the following step.

Step	Action
1	Enter the path name of the resource with the `root` and `anon` options. Example /vol/vol0/home -root=host1:host2,anon=65530 Note The UID specified must not be 0. Result Root users on host1 and host2 access the /vol/vol0/home directory as root and root users from other clients use UID 65530.

For root users on some clients to have root access and others to be treated as nobody

To have users on some clients retain the root UID and others be considered nobody, complete the following step.

Step	Action
1	Enter the path name of the resource with the `root` and `anon` options. Example /vol/vol0/home -root=host1:host2,anon=65534 Result Root users on host1 and host2 access the /vol/vol0/home directory as root and root users from other clients use UID 65534, the UID for the special user named nobody.

Step

Action

Enter the path name of the resource with the root and anon options.

Example

/vol/vol0/home -root=host1:host2,anon=65534

Result

Root users on host1 and host2 access the /vol/vol0/home directory as root and root users from other clients use UID 65534, the UID for the special user named nobody.