[Samba] Issue with acl_xattr:ignore system acls in 4.5rc2
Ralph Böhme
slow at samba.org
Fri Aug 26 16:33:26 UTC 2016
On Thu, Aug 25, 2016 at 12:14:00PM -0700, Jeremy Allison wrote:
> On Wed, Aug 24, 2016 at 04:06:42PM +0200, Ralph Böhme via samba wrote:
> >
> > Yeah, as much as I'd like to avoid adding a new option, I guess we
> > have to do something about it, my latest take on this is
> >
> > acl_xattr:default acl style = [posix|windows]
> >
> > This parameter determines the type of ACL that is
> > synthesized in case a file or directory lacks an
> > security.NTACL xattr.
> >
> > When set to posix, an ACL will be synthesized based on the
> > POSIX mode permissions for user, group and others, with an
> > additional ACE for NT Authority\SYSTEM will full rights..
> >
> > When set to windows, an ACL is synthesized the same way
> > Windows does it, only inclusing permissions for the owner
> > and NT Authority\SYSTEM
> >
> > The default for this option is posix.
> >
> > tldr: this reverts behaviour to what it was before #12028 and make the
> > behaviour introduced by #12028 optional.
> >
> > Plan? Michael? Uri? Jeremy?
>
> I like this. Puts the tweak in the right place IMHO.
ok, final patchset attached. Bonus: it has a test.
Please review & comment & then let's have a final discussion which
default ACL style should be the default, posix or windows. Thanks!
Cheerio!
-slow
More information about the samba
mailing list