The allow comand (and an alternate version of fsconfig(8) that documents it) is available from the idefs tar ball at http://plan9.escet.urjc.es Drop me a line if you need help with this.