[Samba] vfs_fruit 'other' create mode different than parent

Reindl Harald h.reindl at thelounge.net
Mon Jan 23 19:00:07 UTC 2017

Am 23.01.2017 um 19:54 schrieb Ralph Böhme via samba:
> On Mon, Jan 23, 2017 at 11:49:15AM -0600, Chad William Seys wrote:
>> Hi Ralph,
>>> it's a global option. Have you put it in the global or a share section?
>>   Thanks for the hint!  After putting it in the global options the create
>> mode mimics the parent directory as one would expect from
>> "
>> inherit permissions = yes
>> inherit acls = yes
>> "
>> If possible it would be less dangerous (securitywise) not to have
>> fruit:nfs_aces setting interact with 'inherit permissions' and 'inherit
>> acls'.
>> Or at least the default setting of nfs_aces should not interact with a big
>> warning/explanation of how changing to nfs_aces = yes will interact.
> well, the thing is, inheritance works as designed with fruit:nfs_aces=yes, it's
> just that the client changes permissions *after* the fact...

it would be really helpful when samba would have a param to ignore any 
permission changes from the client - each time when we have access 
problems is because some idiotic client changed them instead leave the 
smb server in peace with it's for good reason chosen defaults

More information about the samba mailing list