[PATCH] Patches required for POSIX ACL support of GPOs

Andrew Bartlett abartlet at samba.org
Thu May 10 04:25:14 MDT 2012


On Thu, 2012-05-10 at 09:13 +0200, steve wrote:
> On 10/05/12 03:38, Andrew Bartlett wrote:
> > These patches are in my master-devel branch, and are needed for GPO
> > support to create the correct POSIX ACL.  I would very much appreciate
> > review, so we can consider enabling s3fs by default, and making the 4.0
> > Beta release.
> >
> > https://git.samba.org/?p=abartlet/samba.git/.git;a=shortlog;h=refs/heads/master-devel
> >
> 
> Hi Andrew
> I am testing s3fs but have come up against a problem on the windows side.
> 
> I want a folder that can only be entered by members of a group, say 
> 'staff'. I mkdir the folder and set it to 0750. But now, no one can 
> enter. They get 'Access is denied' even if they are a member of the 
> group staff. I have to set the permissions to 0777 to allow entry.
> 
> Note: I am setting the permissions in Linux.
> 
> Does s3fs understand Linux octal file values?
> Do these patches fix this problem?

There is no change to the way Samba's smbd honours posix ACLs compared
with the long-established historical behaviour (the work has been on
setting ACLs).  Do note however, that if there has been an NT ACL set by
Samba4, smbd may honour that instead.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org



More information about the samba-technical mailing list