How to restrict Windows access for Unix Shares when unix mode bits are set to 777
Applies to
- ONTAP
- CIFS
- NFS
Answer
- When the Unix mode bits are set to 777, then anonymous users will also be given access.
- If the Share level ACL is set to Everyone/xx, then the share will be accessible to Everyone with the give "xx" permissions.
- Since, it is a Unix share, Permission cannot be managed from Windows end, but we can give necessary permissions on Storage end at Share ACL level.
- This will allow only those IDs that are allowed at CIFS Share level to access shares and if not, permission will be denied.