topic Re: NFS vmware data store permissions in Active IQ Unified Manager Discussions

NFS vmware data store permissions

stanleyj42 — Thu, 05 Jun 2025 06:00:11 GMT

I am assigning an NFS datastore to our ESXI environment using system manager 2.2 and having trouble figuring out he proper way of doing the permissions. I would like to restrict access to only my two host and I'm trying to make sure to following the correct procedures because Im don't fully understanding the client permissions verses the root permissions when it comes to VMware.

Default settings in system manager:

Security: UNIX

Client Permissions: All Host read/write allow:yes

Anonymous access: Grant access to root users on all clients to the shared directory.

The options I am currently using:

Security: Unix

Client permissions:

- xxx.xxx.xxx.xxx read/write allow:yes

Anonymous access: Grant root access to all hosts

is this the proper way to apply the security to an nfs datastore in VMware? Do I need a deny statement for all host under client permissions and even though "grant root access to all hosts" works is that the proper option considering I know VMware must have root access.

Re: NFS vmware data store permissions

skiser — Fri, 21 Jun 2013 20:49:36 GMT

I have two entries for each host in the Client Permissions section of the Export in System Manager 2.2. One is for Allow Read Write, the other is Allow Root Access. Under the Anonymous Access section, the "Grant access to root users on all clients to the shared directory" option is selected. Also, the "Enable setuid and setgid executables" option is checked.

Re: NFS vmware data store permissions

stanleyj42 — Mon, 01 Jul 2013 14:24:08 GMT

Thanks for the info. That was the answer I was looking for.

What does the SetUid and Setgid option actually do though?

Re: NFS vmware data store permissions

skiser — Mon, 01 Jul 2013 14:48:44 GMT

Have a look at this article. http://www.techrepublic.com/blog/security/understand-the-setuid-and-setgid-permissions-to-improve-security/2857

Re: NFS vmware data store permissions

BEEFY1471 — Thu, 03 Jul 2014 09:41:02 GMT

Please ignore this post I am being stupid!