rpenny at samba.org
Mon Jul 30 20:01:57 UTC 2018
In 'man vfs_acl_xattr' under 'OPTIONS' there is this:
acl_xattr:ignore system acls = [yes|no]
When set to yes, a best effort mapping from/to the POSIX ACL layer
will not be done by this module. The default is no, which means
that Samba keeps setting and evaluating both the system ACLs and
the NT ACLs. This is better if you need your system ACLs be set for
local or NFS file access, too. If you only access the data via
Samba you might set this to yes to achieve better NT ACL
By my reading, this means by default, Samba will reset 'security.NTACL'
if the ACL's are changed (with setfacl for instance) or if you change
the EA with setfattr etc the ACL's will be reset. However, if
'acl_xattr:ignore system acls = yes' is set, should this mean that the
ACL's are not changed if the EA is changed ?
More information about the samba-technical