Installation guide

4.6.1 The newfs Command No Longer Searches disktab File

Starting with Version 4.0D, the newfs command no longer searches the

/etc/disktab ﬁle for hard disk geometry information. It now performs

an ioctl GETDEVGEOM call to determine the characteristics of a disk.

4.6.2 Using ACLs over NFS

For an NFS client to make direct use of ACLs or extended attributes

(property lists) over NFS, you must be enable the proplistd daemon on

an NFS server. You also must use the proplist mount option when

mounting on the client. Access checks are enforced by the server in any

case, although NFSv2 client caching could sometimes cause inappropriate

read access to be granted. Correctly implemented NFSv3 clients make the

necessary access checks.

Start the proplistd daemon by selecting the number of proplist

daemons to run when you use the nfssetup utility. You can also use the

proplistd command to start the daemon manually:

# /usr/sbin/proplistd 4

On the client, the ﬁle system must be mounted with the proplist option

by either of the following methods:

• Add proplist to the options ﬁeld in the /etc/fstab ﬁle:

sware1:/advfs /nfs_advfs nfs rw,proplist 0 0

• Add the option to the mount command as follows:

# mount -o proplist sware1:/advfs /nfs_advfs

See the acl(4), fstab(4), proplist(4), mount(8), nfssetup(8), and

proplistd(8) reference pages for more information. Note that the

proplist option is not documented in mount(8).

4.6.3 ACL Size Limitations

On AdvFS ﬁle systems there is a hard limit of 1560 bytes for a property list

entry. Since Access Control Lists (ACLs) are stored in property list entries,

this equates to 62 ACL entries in addition to the three required ACL entries.

The EINVAL error is returned if you attempt to exceed this limit.

To facilitate interoperation of the UFS and AdvFS ACLs, a conﬁgurable limit

has been imposed on UFS ACLs. The default value of the UFS limit is 1548

bytes, equivalent to the 65-entry limit on AdvFS. The UFS conﬁgurable

limit on ACLs has been added to the sec subsystem and has been given the

attribute name ufs-sec-proplist-max-entry. You can use the

sysconfig utility to dynamically conﬁgure the attribute or you can use

sysconfigdb or dxkerneltuner to statically conﬁgure the attribute in

Base System Software Notes 4–35