1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
|
# SOME DESCRIPTIVE TITLE
# Copyright (C) YEAR Free Software Foundation, Inc.
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2024-05-01 15:38+0200\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"Language: \n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#. type: TH
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "exports"
msgstr ""
#. type: TH
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "31 December 2009"
msgstr ""
#. type: SH
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "NAME"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid "exports - NFS server export table"
msgstr ""
#. type: SH
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "DESCRIPTION"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The file I</etc/exports> contains a table of local physical file systems on "
"an NFS server that are accessible to NFS clients. The contents of the file "
"are maintained by the server's system administrator."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Each file system in this table has a list of options and an access control "
"list. The table is used by B<exportfs>(8) to give information to "
"B<mountd>(8)."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The file format is similar to the SunOS I<exports> file. Each line contains "
"an export point and a whitespace-separated list of clients allowed to mount "
"the file system at that point. Each listed client may be immediately "
"followed by a parenthesized, comma-separated list of export options for that "
"client. No whitespace is permitted between a client and its option list."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Also, each line may have one or more specifications for default options "
"after the path name, in the form of a dash (\"-\") followed by an option "
"list. The option list is used for all subsequent exports on that line only."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Blank lines are ignored. A pound sign (\"#\") introduces a comment to the "
"end of the line. Entries may be continued across newlines using a backslash. "
"If an export name contains spaces it should be quoted using double quotes. "
"You can also specify spaces or other unusual character in the export name "
"using a backslash followed by the character code as three octal digits."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"To apply changes to this file, run B<exportfs -ra> or restart the NFS server."
msgstr ""
#. type: SS
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "Machine Name Formats"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid "NFS clients may be specified in a number of ways:"
msgstr ""
#. type: IP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "single host"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"You may specify a host either by an abbreviated name recognized be the "
"resolver, the fully qualified domain name, an IPv4 address, or an IPv6 "
"address. IPv6 addresses must not be inside square brackets in /etc/exports "
"lest they be confused with character-class wildcard matches."
msgstr ""
#. type: IP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "IP networks"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"You can also export directories to all hosts on an IP (sub-) network "
"simultaneously. This is done by specifying an IP address and netmask pair as "
"I<address/netmask> where the netmask can be specified in dotted-decimal "
"format, or as a contiguous mask length. For example, either "
"`/255.255.252.0' or `/22' appended to the network base IPv4 address results "
"in identical subnetworks with 10 bits of host. IPv6 addresses must use a "
"contiguous mask length and must not be inside square brackets to avoid "
"confusion with character-class wildcards. Wildcard characters generally do "
"not work on IP addresses, though they may work by accident when reverse DNS "
"lookups fail."
msgstr ""
#. type: IP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "wildcards"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Machine names may contain the wildcard characters I<*> and I<?>, or may "
"contain character class lists within [square brackets]. This can be used to "
"make the I<exports> file more compact; for instance, I<*.cs.foo.edu> matches "
"all hosts in the domain I<cs.foo.edu>. As these characters also match the "
"dots in a domain name, the given pattern will also match all hosts within "
"any subdomain of I<cs.foo.edu>."
msgstr ""
#. type: IP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "netgroups"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"NIS netgroups may be given as I<@group>. Only the host part of each "
"netgroup members is consider in checking for membership. Empty host parts "
"or those containing a single dash (-) are ignored."
msgstr ""
#. type: IP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "anonymous"
msgstr ""
#. .TP
#. .B =public
#. This is a special ``hostname'' that identifies the given directory name
#. as the public root directory (see the section on WebNFS in
#. .BR nfsd (8)
#. for a discussion of WebNFS and the public root handle). When using this
#. convention,
#. .B =public
#. must be the only entry on this line, and must have no export options
#. associated with it. Note that this does
#. .I not
#. actually export the named directory; you still have to set the exports
#. options in a separate entry.
#. .PP
#. The public root path can also be specified by invoking
#. .I nfsd
#. with the
#. .B \-\-public\-root
#. option. Multiple specifications of a public root will be ignored.
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This is specified by a single I<*> character (not to be confused with the "
"I<wildcard> entry above) and will match all clients."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"If a client matches more than one of the specifications above, then the "
"first match from the above list order takes precedence - regardless of the "
"order they appear on the export line. However, if a client matches more than "
"one of the same type of specification (e.g. two netgroups), then the first "
"match from the order they appear on the export line takes precedence."
msgstr ""
#. type: SS
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "RPCSEC_GSS security"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"You may use the special strings \"gss/krb5\", \"gss/krb5i\", or \"gss/"
"krb5p\" to restrict access to clients using rpcsec_gss security. However, "
"this syntax is deprecated; on linux kernels since 2.6.23, you should instead "
"use the \"sec=\" export option:"
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<sec=>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The sec= option, followed by a colon-delimited list of security flavors, "
"restricts the export to clients using those flavors. Available security "
"flavors include sys (the default--no cryptographic security), krb5 "
"(authentication only), krb5i (integrity protection), and krb5p (privacy "
"protection). For the purposes of security flavor negotiation, order counts: "
"preferred flavors should be listed first. The order of the sec= option with "
"respect to the other options does not matter, unless you want some options "
"to be enforced differently depending on flavor. In that case you may "
"include multiple sec= options, and following options will be enforced only "
"for access using flavors listed in the immediately preceding sec= option. "
"The only options that are permitted to vary in this way are ro, rw, "
"no_root_squash, root_squash, and all_squash."
msgstr ""
#. type: SS
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "Transport layer security"
msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The Linux NFS server allows the use of RPC-with-TLS (RFC 9289) to protect "
"RPC traffic between itself and its clients. Alternately, administrators can "
"secure NFS traffic using a VPN, or an ssh tunnel or similar mechanism, in a "
"way that is transparent to the server."
msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"To enable the use of RPC-with-TLS, the server's administrator must install "
"and configure B<tlshd> to handle transport layer security handshake requests "
"from the local kernel. Clients can then choose to use RPC-with-TLS or they "
"may continue operating without it."
msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Administrators may require the use of RPC-with-TLS to protect access to "
"individual exports. This is particularly useful when using non-"
"cryptographic security flavors such as I<sec=sys>. The I<xprtsec=> option, "
"followed by an unordered colon-delimited list of security policies, can "
"restrict access to the export to only clients that have negotiated transport-"
"layer security. Currently supported transport layer security policies "
"include:"
msgstr ""
#. type: TP
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<none>"
msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The server permits clients to access the export without the use of transport "
"layer security."
msgstr ""
#. type: TP
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<tls>"
msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The server permits clients that have negotiated an RPC-with-TLS session "
"without peer authentication (confidentiality only) to access the export. "
"Clients are not required to offer an x.509 certificate when establishing a "
"transport layer security session."
msgstr ""
#. type: TP
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<mtls>"
msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The server permits clients that have negotiated an RPC-with-TLS session with "
"peer authentication to access the export. The server requires clients to "
"offer an x.509 certificate when establishing a transport layer security "
"session."
msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"If RPC-with-TLS is configured and enabled and the I<xprtsec=> option is not "
"specified, the default setting for an export is I<xprtsec=none:tls:mtls>. "
"With this setting, the server permits clients to use any transport layer "
"security mechanism or none at all to access the export."
msgstr ""
#. type: SS
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "General Options"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid "B<exportfs> understands the following export options:"
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<secure>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This option requires that requests not using gss originate on an Internet "
"port less than IPPORT_RESERVED (1024). This option is on by default. To "
"turn it off, specify I<insecure>. (NOTE: older kernels (before upstream "
"kernel version 4.17) enforced this requirement on gss requests as well.)"
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<rw>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Allow both read and write requests on this NFS volume. The default is to "
"disallow any request which changes the filesystem. This can also be made "
"explicit by using the I<ro> option."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<async>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This option allows the NFS server to violate the NFS protocol and reply to "
"requests before any changes made by that request have been committed to "
"stable storage (e.g. disc drive)."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Using this option usually improves performance, but at the cost that an "
"unclean server restart (i.e. a crash) can cause data to be lost or corrupted."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<sync>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Reply to requests only after the changes have been committed to stable "
"storage (see I<async> above)."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"In releases of nfs-utils up to and including 1.0.0, the I<async> option was "
"the default. In all releases after 1.0.0, I<sync> is the default, and "
"I<async> must be explicitly requested if needed."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<no_wdelay>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This option has no effect if I<async> is also set. The NFS server will "
"normally delay committing a write request to disc slightly if it suspects "
"that another related write request may be in progress or may arrive soon. "
"This allows multiple write requests to be committed to disc with the one "
"operation which can improve performance. If an NFS server received mainly "
"small unrelated requests, this behaviour could actually reduce performance, "
"so I<no_wdelay> is available to turn it off. The default can be explicitly "
"requested with the I<wdelay> option."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<nohide>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This option is based on the option of the same name provided in IRIX NFS. "
"Normally, if a server exports two filesystems one of which is mounted on the "
"other, then the client will have to mount both filesystems explicitly to get "
"access to them. If it just mounts the parent, it will see an empty "
"directory at the place where the other filesystem is mounted. That "
"filesystem is \"hidden\"."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Setting the I<nohide> option on a filesystem causes it not to be hidden, and "
"an appropriately authorised client will be able to move from the parent to "
"that filesystem without noticing the change."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"However, some NFS clients do not cope well with this situation as, for "
"instance, it is then possible for two files in the one apparent filesystem "
"to have the same inode number."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The I<nohide> option is currently only effective on I<single host> exports. "
"It does not work reliably with netgroup, subnet, or wildcard exports."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This option can be very useful in some situations, but it should be used "
"with due care, and only after confirming that the client system copes with "
"the situation effectively."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid "The option can be explicitly disabled for NFSv2 and NFSv3 with I<hide>."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This option is not relevant when NFSv4 is use. NFSv4 never hides "
"subordinate filesystems. Any filesystem that is exported will be visible "
"where expected when using NFSv4."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<crossmnt>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This option is similar to I<nohide> but it makes it possible for clients to "
"access all filesystems mounted on a filesystem marked with I<crossmnt>. "
"Thus when a child filesystem \"B\" is mounted on a parent \"A\", setting "
"crossmnt on \"A\" has a similar effect to setting \"nohide\" on B."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"With I<nohide> the child filesystem needs to be explicitly exported. With "
"I<crossmnt> it need not. If a child of a I<crossmnt> file is not explicitly "
"exported, then it will be implicitly exported with the same export options "
"as the parent, except for I<fsid=>. This makes it impossible to B<not> "
"export a child of a I<crossmnt> filesystem. If some but not all subordinate "
"filesystems of a parent are to be exported, then they must be explicitly "
"exported and the parent should not have I<crossmnt> set."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable mageia-cauldron opensuse-leap-15-6
#: opensuse-tumbleweed
msgid ""
"The I<nocrossmnt> option can explictly disable I<crossmnt> if it was "
"previously set. This is rarely useful."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<no_subtree_check>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This option disables subtree checking, which has mild security implications, "
"but can improve reliability in some circumstances."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"If a subdirectory of a filesystem is exported, but the whole filesystem "
"isn't then whenever a NFS request arrives, the server must check not only "
"that the accessed file is in the appropriate filesystem (which is easy) but "
"also that it is in the exported tree (which is harder). This check is called "
"the I<subtree_check>."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"In order to perform this check, the server must include some information "
"about the location of the file in the \"filehandle\" that is given to the "
"client. This can cause problems with accessing files that are renamed while "
"a client has them open (though in many simple cases it will still work)."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"subtree checking is also used to make sure that files inside directories to "
"which only root has access can only be accessed if the filesystem is "
"exported with I<no_root_squash> (see below), even if the file itself allows "
"more general access."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"As a general guide, a home directory filesystem, which is normally exported "
"at the root and may see lots of file renames, should be exported with "
"subtree checking disabled. A filesystem which is mostly readonly, and at "
"least doesn't see many file renames (e.g. /usr or /var) and for which "
"subdirectories may be exported, should probably be exported with subtree "
"checks enabled."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The default of having subtree checks enabled, can be explicitly requested "
"with I<subtree_check>."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"From release 1.1.0 of nfs-utils onwards, the default will be "
"I<no_subtree_check> as subtree_checking tends to cause more problems than it "
"is worth. If you genuinely require subtree checking, you should explicitly "
"put that option in the B<exports> file. If you put neither option, "
"B<exportfs> will warn you that the change is pending."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<insecure_locks>"
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<no_auth_nlm>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This option (the two names are synonymous) tells the NFS server not to "
"require authentication of locking requests (i.e. requests which use the NLM "
"protocol). Normally the NFS server will require a lock request to hold a "
"credential for a user who has read access to the file. With this flag no "
"access checks will be performed."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Early NFS client implementations did not send credentials with lock "
"requests, and many current NFS clients still exist which are based on the "
"old implementations. Use this flag if you find that you can only lock files "
"which are world readable."
msgstr ""
#. .TP
#. .I noaccess
#. This makes everything below the directory inaccessible for the named
#. client. This is useful when you want to export a directory hierarchy to
#. a client, but exclude certain subdirectories. The client's view of a
#. directory flagged with noaccess is very limited; it is allowed to read
#. its attributes, and lookup `.' and `..'. These are also the only entries
#. returned by a readdir.
#. .TP
#. .IR link_relative
#. Convert absolute symbolic links (where the link contents start with a
#. slash) into relative links by prepending the necessary number of ../'s
#. to get from the directory containing the link to the root on the
#. server. This has subtle, perhaps questionable, semantics when the file
#. hierarchy is not mounted at its root.
#. .TP
#. .IR link_absolute
#. Leave all symbolic link as they are. This is the default operation.
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The default behaviour of requiring authentication for NLM requests can be "
"explicitly requested with either of the synonymous I<auth_nlm>, or "
"I<secure_locks>."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<mountpoint=>path"
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<mp>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This option makes it possible to only export a directory if it has "
"successfully been mounted. If no path is given (e.g. I<mountpoint> or "
"I<mp>) then the export point must also be a mount point. If it isn't then "
"the export point is not exported. This allows you to be sure that the "
"directory underneath a mountpoint will never be exported by accident if, for "
"example, the filesystem failed to mount due to a disc error."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"If a path is given (e.g. I<mountpoint=>/path or I<mp=>/path) then the "
"nominated path must be a mountpoint for the exportpoint to be exported."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<fsid=>num|root|uuid"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"NFS needs to be able to identify each filesystem that it exports. Normally "
"it will use a UUID for the filesystem (if the filesystem has such a thing) "
"or the device number of the device holding the filesystem (if the filesystem "
"is stored on the device)."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"As not all filesystems are stored on devices, and not all filesystems have "
"UUIDs, it is sometimes necessary to explicitly tell NFS how to identify a "
"filesystem. This is done with the I<fsid=> option."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"For NFSv4, there is a distinguished filesystem which is the root of all "
"exported filesystem. This is specified with I<fsid=root> or I<fsid=0> both "
"of which mean exactly the same thing."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Other filesystems can be identified with a small integer, or a UUID which "
"should contain 32 hex digits and arbitrary punctuation."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Linux kernels version 2.6.20 and earlier do not understand the UUID setting "
"so a small integer must be used if an fsid option needs to be set for such "
"kernels. Setting both a small number and a UUID is supported so the same "
"configuration can be made to work on old and new kernels alike."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<nordirplus>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This option will disable READDIRPLUS request handling. When set, "
"READDIRPLUS requests from NFS clients return NFS3ERR_NOTSUPP, and clients "
"fall back on READDIR. This option affects only NFSv3 clients."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<refer=>path@host[+host][:path@host[+host]]"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"A client referencing the export point will be directed to choose from the "
"given list an alternative location for the filesystem. (Note that the "
"server must have a mountpoint here, though a different filesystem is not "
"required; so, for example, I<mount --bind> /path /path is sufficient.)"
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<replicas=>path@host[+host][:path@host[+host]]"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"If the client asks for alternative locations for the export point, it will "
"be given this list of alternatives. (Note that actual replication of the "
"filesystem must be handled elsewhere.)"
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<pnfs>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This option enables the use of the pNFS extension if the protocol level is "
"NFSv4.1 or higher, and the filesystem supports pNFS exports. With pNFS "
"clients can bypass the server and perform I/O directly to storage devices. "
"The default can be explicitly requested with the I<no_pnfs> option."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<security_label>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"With this option set, clients using NFSv4.2 or higher will be able to set "
"and retrieve security labels (such as those used by SELinux). This will "
"only work if all clients use a consistent security policy. Note that early "
"kernels did not support this export option, and instead enabled security "
"labels by default."
msgstr ""
#. type: TP
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<reexport=>auto-fsidnum|predefined-fsidnum"
msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"This option helps when a NFS share is re-exported. Since the NFS server "
"needs a unique identifier for each exported filesystem and a NFS share "
"cannot provide such, usually a manual fsid is needed. As soon I<crossmnt> "
"is used manually assigning fsid won't work anymore. This is where this "
"option becomes handy. It will automatically assign a numerical fsid to "
"exported NFS shares. The fsid and path relations are stored in a SQLite "
"database. If I<auto-fsidnum> is selected, the fsid is also autmatically "
"allocated. I<predefined-fsidnum> assumes pre-allocated fsid numbers and "
"will just look them up. This option depends also on the kernel, you will "
"need at least kernel version 5.19. Since I<reexport=> can automatically "
"allocate and assign numerical fsids, it is no longer possible to have "
"numerical fsids in other exports as soon this option is used in at least one "
"export entry."
msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The association between fsid numbers and paths is stored in a SQLite "
"database. Don't edit or remove the database unless you know exactly what "
"you're doing. I<predefined-fsidnum> is useful when you have used I<auto-"
"fsidnum> before and don't want further entries stored."
msgstr ""
#. type: SS
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "User ID Mapping"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"B<nfsd> bases its access control to files on the server machine on the uid "
"and gid provided in each NFS RPC request. The normal behavior a user would "
"expect is that she can access her files on the server just as she would on a "
"normal file system. This requires that the same uids and gids are used on "
"the client and the server machine. This is not always true, nor is it always "
"desirable."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Very often, it is not desirable that the root user on a client machine is "
"also treated as root when accessing files on the NFS server. To this end, "
"uid 0 is normally mapped to a different id: the so-called anonymous or "
"I<nobody> uid. This mode of operation (called `root squashing') is the "
"default, and can be turned off with I<no_root_squash>."
msgstr ""
#. .B nfsd
#. tries to obtain the anonymous uid and gid by looking up user
#. .I nobody
#. in the password file at startup time. If it isn't found, a uid and gid
#. .PP
#. In addition to this,
#. .B nfsd
#. lets you specify arbitrary uids and gids that should be mapped to user
#. nobody as well.
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"By default, B<exportfs> chooses a uid and gid of 65534 for squashed access. "
"These values can also be overridden by the I<anonuid> and I<anongid> "
"options. Finally, you can map all user requests to the anonymous uid by "
"specifying the I<all_squash> option."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid "Here's the complete list of mapping options:"
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<root_squash>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Map requests from uid/gid 0 to the anonymous uid/gid. Note that this does "
"not apply to any other uids or gids that might be equally sensitive, such as "
"user I<bin> or group I<staff>."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<no_root_squash>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Turn off root squashing. This option is mainly useful for diskless clients."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<all_squash>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Map all uids and gids to the anonymous user. Useful for NFS-exported public "
"FTP directories, news spool directories, etc. The opposite option is "
"I<no_all_squash>, which is the default setting."
msgstr ""
#. type: TP
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "I<anonuid> and I<anongid>"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"These options explicitly set the uid and gid of the anonymous account. This "
"option is primarily useful for PC/NFS clients, where you might want all "
"requests appear to be from one user. As an example, consider the export "
"entry for B</home/joe> in the example section below, which maps all requests "
"to uid 150 (which is supposedly that of user joe)."
msgstr ""
#. type: SS
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "Subdirectory Exports"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Normally you should only export only the root of a filesystem. The NFS "
"server will also allow you to export a subdirectory of a filesystem, "
"however, this has drawbacks:"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"First, it may be possible for a malicious user to access files on the "
"filesystem outside of the exported subdirectory, by guessing filehandles for "
"those other files. The only way to prevent this is by using the "
"I<no_subtree_check> option, which can cause other problems."
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Second, export options may not be enforced in the way that you would "
"expect. For example, the I<security_label> option will not work on "
"subdirectory exports, and if nested subdirectory exports change the "
"I<security_label> or I<sec=> options, NFSv4 clients will normally see only "
"the options on the parent export. Also, where security options differ, a "
"malicious client may use filehandle-guessing attacks to access the files "
"from one subdirectory using the options from another."
msgstr ""
#. type: SS
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "Extra Export Tables"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"After reading I</etc/exports> B<exportfs> reads files in the I</etc/exports."
"d> directory as extra export tables. Only files ending in I<.exports> are "
"considered. Files beginning with a dot are ignored. The format for extra "
"export tables is the same as I</etc/exports>"
msgstr ""
#. type: SH
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "EXAMPLE"
msgstr ""
#. type: ta
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "+3i"
msgstr ""
#. /pub/private (noaccess)
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid ""
"# sample /etc/exports file\n"
"/ master(rw) trusty(rw,no_root_squash)\n"
"/projects proj*.local.domain(rw)\n"
"/usr *.local.domain(ro) @trusted(rw)\n"
"/home/joe pc001(rw,all_squash,anonuid=150,anongid=100)\n"
"/pub *(ro,insecure,all_squash)\n"
"/srv/www -sync,rw server @trusted @external(ro)\n"
"/foo 2001:db8:9:e54::/64(rw) 192.0.2.0/24(rw)\n"
"/build buildhost[0-9].local.domain(rw)\n"
msgstr ""
#. The last line denies all NFS clients
#. access to the private directory.
#. .SH CAVEATS
#. Unlike other NFS server implementations, this
#. .B nfsd
#. allows you to export both a directory and a subdirectory thereof to
#. the same host, for instance
#. .IR /usr " and " /usr/X11R6 .
#. In this case, the mount options of the most specific entry apply. For
#. instance, when a user on the client host accesses a file in
#. .IR /usr/X11R6 ,
#. the mount options given in the
#. .I /usr/X11R6
#. entry apply. This is also true when the latter is a wildcard or netgroup
#. entry.
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The first line exports the entire filesystem to machines master and trusty. "
"In addition to write access, all uid squashing is turned off for host "
"trusty. The second and third entry show examples for wildcard hostnames and "
"netgroups (this is the entry `@trusted'). The fourth line shows the entry "
"for the PC/NFS client discussed above. Line 5 exports the public FTP "
"directory to every host in the world, executing all requests under the "
"nobody account. The I<insecure> option in this entry also allows clients "
"with NFS implementations that don't use a reserved port for NFS. The sixth "
"line exports a directory read-write to the machine 'server' as well as the "
"`@trusted' netgroup, and read-only to netgroup `@external', all three mounts "
"with the `sync' option enabled. The seventh line exports a directory to both "
"an IPv6 and an IPv4 subnet. The eighth line demonstrates a character class "
"wildcard match."
msgstr ""
#. type: SH
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "FILES"
msgstr ""
#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid "/etc/exports /etc/exports.d"
msgstr ""
#. type: SH
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
#, no-wrap
msgid "SEE ALSO"
msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"B<exportfs>(8), B<netgroup>(5), B<mountd>(8), B<nfsd>(8), B<showmount>(8), "
"B<tlshd>(8)."
msgstr ""
#. type: Plain text
#: debian-bookworm
msgid ""
"B<exportfs>(8), B<netgroup>(5), B<mountd>(8), B<nfsd>(8), B<showmount>(8)."
msgstr ""
#. type: Plain text
#: fedora-40 fedora-rawhide
msgid ""
"The I<nocrossmnt> option can explicitly disable I<crossmnt> if it was "
"previously set. This is rarely useful."
msgstr ""
#. type: Plain text
#: fedora-40 fedora-rawhide
msgid ""
"This option affects only NFSv4 clients. Other clients will ignore all "
"\"refer=\" parts."
msgstr ""
|