Windowsユーザは権限がなくてもNFS共有にアクセスできる

環境

問題

• Windowsユーザが、モードビット775のUNIXセキュリティ形式のボリュームパスに書き込むことができる。

 ::> vserver security file-directory show -vserver svm -path /vol/Folder/Folder1/Folder2 Vserver: svm File Path: /vol/Folder/Folder1/Folder2 File Inode Number: 1183479 Security Style: unix Effective Style: unix DOS Attributes: 10 DOS Attributes in Text: ----D--- Expanded Dos Attributes: - UNIX User Id: 34071 UNIX Group Id: 0000 UNIX Mode Bits: 775 UNIX Mode Bits in Text: rwxrwxr-x 

• ユーザがpcuserにマッピングされています。pcuserには読み取りと実行の権限しかありませんが、共有への書き込みは可能です。
• sectraceに次のエラーが表示されます。 

svm     1    Security Style: UNIX    Access is allowed because the
            permissions         user has UNIX owner
                         privileges, the user has UNIX
                         permissions while opening
                         existing file or directory.
                         Access is granted for: "Read
                         Control", "Write Attributes",
                         "Read Attributes", "Write EA",
                         "Read EA", "Append", "Write",
                         "Read"
            Protocol: cifs
            Volume: -
            Share: Folder1
            Path:vol/Folder/Folder1/Folder2
            Win-User: DOMAIN\
            user
            UNIX-User: pcuser
            Session-ID: 15305201858646175266