Preserving NTFS permissions.

Christopher R. Hertel crh at
Mon Jul 2 20:29:28 GMT 2007

You guys should know by now that I like to grok something in a deep and
meaningful way before I approach it with a pointed stick.  :)

Okay.  I'll see if we can put together something that just stores and
retrieves the ACEs as a first step.

The thing that still confuses me is that the default VFS behavior seems to
take the settings from Windows systems and map them to the Posix bits, which
in turn impacts the VFAT bitmap interpretation.  There's something weird
going on there.

Chris -)-----

simo wrote:
> On Mon, 2007-07-02 at 14:56 -0500, Christopher R. Hertel wrote:
>> Simo, Jeremy,
>> There is some interest in going forward with work on a VFS module that would
>> store and retrieve NTFS DACLs using EAs.  The overall goal is to enforce
>> those DACLs... but one step at a time.
>> :)
>> For my own part, I am interested in a clearer understanding of the
>> interactions between the VFAT bits, the POSIX bits, the current behavior of
>> the default VFS module, and what needs to be done to make NTFS ACLs work
>> properly.  I know Jeremy has put a lot of effort into understanding how the
>> DACLs work in particular (I remember a presentation... what... six years ago?).
>> Your input on next steps would be appreciated.
> Chris I think this could be a wonderful subject for a book, would you
> like to dig in the code and extract distilled knowledge for us to
> enjoy? :-)
> Jokes aside I think all we can say is really in the code itself, I guess
> it is much easier to get specific questions and see if we can give
> precise answers or not based on what there is in the code and memories
> we have around.
> Simo.

"Implementing CIFS - the Common Internet FileSystem" ISBN: 013047116X
Samba Team --     -)-----   Christopher R. Hertel
jCIFS Team --   -)-----   ubiqx development, uninq.
ubiqx Team --     -)-----   crh at
OnLineBook --    -)-----   crh at

More information about the samba-technical mailing list