[Samba] vfs_fruit 'other' create mode different than parent

[Ralph Böhme]

On Mon, Jan 23, 2017 at 11:49:15AM -0600, Chad William Seys wrote:
> Hi Ralph,
> > it's a global option. Have you put it in the global or a share section?
> 
>   Thanks for the hint!  After putting it in the global options the create
> mode mimics the parent directory as one would expect from
> "
> inherit permissions = yes
> inherit acls = yes
> "
> 
> If possible it would be less dangerous (securitywise) not to have
> fruit:nfs_aces setting interact with 'inherit permissions' and 'inherit
> acls'.
> 
> Or at least the default setting of nfs_aces should not interact with a big
> warning/explanation of how changing to nfs_aces = yes will interact.

well, the thing is, inheritance works as designed with fruit:nfs_aces=yes, it's
just that the client changes permissions *after* the fact...

Maybe we could switch fruit:nfs_aces to no at runtime based on the inherit
settings. Thoughts?

Cheerio!
-slow