Failure Analysis of Samba (4/23) with NT

Jeremy Allison jeremy at valinux.com
Thu May 3 16:27:02 GMT 2001


On Thu, May 03, 2001 at 08:25:39AM -0700, Marc Jacobsen wrote:
> 
> If all these parameters are being enforced properly the create stuff shouldn't
> affect setting ACLs, right?  If you want to "acl ignore mask" you just set the
> second 4 parameters to 0 or 777 or whatever.  Adding another parameter seems
> totally redundant.
> 
> Am I missing something?

No, that's essentially correct. The reasoning behind the
parameter is that an admin may want to set a restriction
that group owners always have rw access for example, and
not enforcing that when a "create with ACL" open is done
would break that policy. With "acl ignore masks = False"
then a create with ACL would have the restriction applied.

Jeremy.

-- 
--------------------------------------------------------
Buying an operating system without source is like buying
a self-assembly Space Shuttle with no instructions.
--------------------------------------------------------




More information about the samba-technical mailing list