Specifying root access in /etc/exports

About root access

After the root user on a client mounts a resource, depending on the specifications in the /etc/exports file, the root user has one of the following types of access:

The root users is able to access the resource only with the UID 0.
The root users is able to access the resource with a nonroot UID.
The root users is denied access.

Specifying the same root access restriction for all clients

For all clients to have root access

To give all clients root access, complete the following step.

Step	Action
1	In the /etc/exports file, enter the path name of the resource with the `anon` option. Example /vol/vol0/home -anon=0 Result Root users on any client can access the /vol/vol0/home directory with UID 0.

For all users to have root access

To give all users root access, complete the following step.

Step	Action
1	In the /etc/exports file, enter the path name of the resource with the `anon` option. Example /vol/vol0 -anon=root Result Users on any client can access the /vol/vol0 directory.

For no clients to have root access

To deny access to a resource to root users on all clients, complete the following step.

Step	Action
1	In the /etc/exports file, enter the path name of the resource with the `anon` option. Example /vol/vol0/home -anon=65535 Result No root users on clients who have mounted the /vol/vol0/home directory can access the directory.

For all clients to be considered nonroot users

To have root users on all clients be considered nonroot users when accessing the resource, complete the following step.

Step	Action
1	In the /etc/exports file, enter the path name of the resource with the `anon` option. Example /vol/vol0/home -anon=65530 Note The UID specified must not be 0. Result All root users on clients who have mounted the /vol/vol0/home directory access the directory with UID 65530.

For root users on all clients to be considered "nobody"

To have root users on all clients access the resource as "nobody," complete the following step.

Step	Action
1	In the /etc/exports file, enter the path name of the resource with the `anon` option. Example /vol/vol0/home -anon=65534 Result All users on clients who have mounted the /vol/vol0/home directory can access the directory with UID 65534, which is the UID for a special user named "nobody".

Specifying that some users have root access

For specified clients to have root access and all others no root access

To have the root users on certain clients retain the root UID and to give all others no root access, complete the following step.

Step	Action
1	In the /etc/exports file, enter the path name of the resource with the `root` and `anon` options. Example /vol/vol0/home -root=host1:host2,anon=65535 Result Root users on host1 and host2 access the /vol/vol0/home directory as root, and root users on all other clients are denied access.

For root users on specified clients to have root access and all others nonroot access

To have users on certain clients retain the root UID and give others a nonzero UID, complete the following step.

Step	Action
1	Enter the path name of the resource with the `root` and `anon` options. Example /vol/vol0/home -root=host1:host2,anon=65530 Note The UID specified must not be 0. Result Root users on host1 and host2 access the /vol/vol0/home directory as root, and root users from other clients use UID 65530.

Step

Action

Enter the path name of the resource with the root and anon options.

Example

/vol/vol0/home -root=host1:host2,anon=65530

Note
The UID specified must not be 0.

Result

Root users on host1 and host2 access the /vol/vol0/home directory as root, and root users from other clients use UID 65530.

For root users on specified clients to have root access and others to be considered to be "nobody"

To have root users on certain clients retain the root UID and root users on other clients be considered the "nobody" user, complete the following step.

Step	Action
1	In the /etc/exports file, enter the path name of the resource with the `root` and `anon` options. Example /vol/vol0/home -root=host1:host2,anon=65534 Result Root users on host1 and host2 access the /vol/vol0/home directory as root, and root users from other clients use UID 65534, the UID for the special user named "nobody".

Step

Action

In the /etc/exports file, enter the path name of the resource with the root and anon options.

Example

/vol/vol0/home -root=host1:host2,anon=65534

Result

Root users on host1 and host2 access the /vol/vol0/home directory as root, and root users from other clients use UID 65534, the UID for the special user named "nobody".