[Samba] 'x' bit always set?
NdK
ndk.clanbo at gmail.com
Thu Aug 2 02:49:34 MDT 2012
Il 01/08/2012 16:23, Helmut Hullen ha scritto:
> Hallo, Jonathan,
>
> Du meintest am 01.08.12:
>
>>>>>> Seems I can't find the root cause of $subj.
>>>>>> When I store a file on my "home", it gets chmodded ugo+x ...
>
> [...]
>
>> mount your file system with extended attributes
>> enabled and then add the following to your smb.conf
>
>> # store DOS attributes in extended attributes
>> ea support = yes
Added this.
>> store dos attributes = yes
This was already there.
>> map readonly = no
>> map archive = no
>> map system = no
> map hidden = no
According to the man page, when "store dos attributes" is set, those
should be ignored. But I added 'em anyway.
This is the result when I put a file via Dolphin's smb:// handler:
root at str00160-samba:/srv/shared/PERSONALE# getfacl diego.zuccato
# file: diego.zuccato
# owner: diego.zuccato
# group: domain_users
# flags: s--
user::rwx
user:str00160-backup:rw- #effective:---
group::rwx #effective:--x
mask::--x
other::--x
default:user::rwx
default:user:diego.zuccato:rwx
default:group::--x
default:group:domain_users:--x
default:mask::rwx
default:other::---
root at str00160-samba:/srv/shared/PERSONALE# getfacl diego.zuccato/*
# file: diego.zuccato/index.html
# owner: diego.zuccato
# group: domain_users
user::rwx
user:diego.zuccato:rwx
group::--x
group:domain_users:--x
mask::rwx
other::---
root at str00160-samba:/srv/shared/PERSONALE# getfattr -d diego.zuccato/*
# file: diego.zuccato/index.html
user.DOSATTRIB=0sMHgyMAAAAwADAAAAEQAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcWNMuJcM0BAAAAAAAAAAA=
The folder 'diego.zuccato' is created by those commands run as root:
mkdir -p $home >> $log 2>&1
chown "$domain\\$user":$domusers $home >> $log 2>&1
chmod 4711 $home >> $log 2>&1
setfacl
--set=d:u::rwX,d:g::--X,d:o::---,d:u:"$domain\\$user":rwX,d:g:$domusers:--X
$home >> $log 2>&1
where $home is, obviously, /srv/shared/PERSONALE/diego.zuccato ...
IIUC, uppercase 'X' should set 'x' bit only on dirs and on files where
it's explicitly set, so I think it's Samba adding it... but why?
That's why I'm getting mad at it... :(
Another problem I just noticed: effective permissions for
str00160-backup is --x instead of rwx and it's not set on the file ???
ARGH! I start hating ACLs !
BYtE,
Diego.
More information about the samba
mailing list