[Samba] acl_xattr

Piviul piviul at riminilug.it
Fri Dec 16 13:01:57 UTC 2022


I need to share a folder in a way that some groups members have write 
permissions to the share and some other groups members can only read 
files on the share, the others members can't access at all.

I don't care about acl, all files/directory in the share should have the 
same access.  Do you think that disabling acls in a such way

vfs objects = acl_xattr
acl_xattr:ignore system acls = yes
valid users = <read groups list>,<write group list>
read list   = <read groups list>
write list  = <write group list>
force group = staff
create mask = 0664
force create mode = 0664
directory mask = 0775
force directory mode = 2775

would be a good idea or it is better don't disable acls and set the 
default acl in the directory shared then use only valid users, read 
list, write list and force group options mentioned above?

Best regards

Piviul





More information about the samba mailing list