The everyone permission has been added after applied sdname policy
Applies to
ONTAP 9
Issue
- The everyone permission has been added after applied sd (Security Descriptor) name policy.
- Follows the below commands, the everyone permission is added in the
/test1.
Example:
Cluster1::> vserver security file‐directory ntfs dacl add ‐ntfs‐sd sd1 ‐vserver svm_data1 ‐access‐type allow ‐account user1 ‐rights full‐control ‐apply‐to this‐folder
Cluster1::> vserver security file‐directory policy create ‐vserver svm_data1 ‐policy‐name policy1
Cluster1::> vserver security file‐directory policy task add ‐vserver svm_data1 ‐policyname policy1 ‐path /test1 ‐security‐type ntfs ‐ntfs‐sd sd1 ‐ntfs‐mode propagate ‐indexnum 1 ‐access‐control file‐directory
Cluster1::> vserver security file‐directory apply ‐vserver svm_data1 ‐policy‐name policy1