setfacl fix

Steve French smfrench at
Sat Nov 16 14:55:07 MST 2013

On Sat, Nov 16, 2013 at 9:15 AM, steve <steve at> wrote:
>> > From: Steve French <smfrench at>
>> > Date: Fri, 15 Nov 2013 20:41:32 -0600
>> > Subject: [PATCH] [CIFS] setfacl removes part of ACL when setting POSIX ACLs to
>> >  Samba
>> >
>> > setfacl over cifs mounts can remove the default ACL
> Hi
> cifs-utils 6.1 Samba 4.1.0
> I don't understand the '...over cifs mounts...' bit.
> Does it mean that if I have a share mounted on my Linux box and do a
> setfacl on a file in the share then the default acl will be removed?
> Sorry for a non dev question.

I was surprised too.  Over a cifs mount (to Samba, as Windows does not
support the POSIX style ACLs) it looks like many users paid attention
to only half the POSIX ACL, adding additional users or groups to the
(non-default) ACL and ignoring the default ACL or vice versa.  A user
reported the problem (with part of the ACL getting removed on setfacl
over a cifs mount) a couple days ago, and I found one older reference
to a similar problem.



More information about the samba-technical mailing list