Question on streams dir structure creation.

Jeremy Allison jra at
Wed Oct 19 23:55:54 UTC 2016

On Wed, Oct 19, 2016 at 12:22:47AM +0000, Hemanth Thummala wrote:
> In vfs_mkdir(), I see that mode will be overwritten with (0777 & lp_directory_mask(SNUM(handle->conn)) when the inherit acls set to true and the parent dirname has DACL. In our case,  “.streams”  never inherit NTACLs on creation. And the default or dummy security descriptor doesn’t have DACL. Not sure if this check is expected to passed for the stream directories.

Are you setting the 'veto files = .streams' so the
clients can't get to the stored streams ? If so,
then I think you can probably open up the permissions
here as SMB clients just can't get to or see these

More information about the samba-technical mailing list