AAPL NFS ACE semantics.

Jeremy Allison jra at samba.org
Mon Feb 26 21:35:51 UTC 2018


Hi Ralph,

I'm working on my SMB2-UNIX-Extensions tree,
and thought I might re-use the check_ms_nfs()
code from source3/modules/vfs_fruit.c to
allow UNIX chmod calls.

What are the exact semantics here ? I'm a
bit confused, as the fruit code seems
to pull out the mode is there's a
global_sid_Unix_NFS_Mode trustee in
the passed in dacl, but then pass the
whole thing to SMB_VFS_NEXT_FSET_NT_ACL()
before doing the chmod after.

Are there any docs on how this chmod call
is supposed to work/interact with existing
ACLs.

It would seem to me that if you only
wanted a chmod call, you'd insist on
a one-element ACE with global_sid_Unix_NFS_Mode
only, but it looks like it's more complex
than that.

Cheers,

	Jeremy.



More information about the samba-technical mailing list