Rowland Penny rpenny at samba.org
Mon Jul 30 20:01:57 UTC 2018


In 'man vfs_acl_xattr' under 'OPTIONS' there is this:

acl_xattr:ignore system acls = [yes|no]
    When set to yes, a best effort mapping from/to the POSIX ACL layer
    will not be done by this module. The default is no, which means
    that Samba keeps setting and evaluating both the system ACLs and
    the NT ACLs. This is better if you need your system ACLs be set for
    local or NFS file access, too. If you only access the data via
    Samba you might set this to yes to achieve better NT ACL

By my reading, this means by default, Samba will reset 'security.NTACL'
if the ACL's are changed (with setfacl for instance) or if you change
the EA with setfattr etc the ACL's will be reset. However, if
'acl_xattr:ignore system acls = yes' is set, should this mean that the
ACL's are not changed if the EA is changed ? 


More information about the samba-technical mailing list