you have to root_squash if you want to limit the access.  you can't limit root.
We have a NFS share exported as no_root_squash. We would like to make one the directories under it read-only to root. How can we accomplish that?  root can still write even when we have this ACLs:  # ls -led dir-1 dr-xr-x--- +  2 root wheel  108 Dec  7 14:00 dir-1  OWNER: user:root  GROUP: group:wheel  0: user:root deny dir_gen_write  1: user:root allow dir_gen_read,dir_gen_execute,std_write_dac,dir_write_attr  2: group:wheel allow dir_gen_read,dir_gen_execute  3: everyone allow std_read_dac,std_synchronize,dir_read_attr #  Any idea what we need to change to deny root from writing to the directory?  -Dan
Isilon ACL Question