[Samba] Behavior of acl_xattr:ignore system acls = yes on a share

[Rowland Penny]

On Wed, 31 Jan 2024 11:38:31 +0100
Peter Milesson via samba <samba at lists.samba.org> wrote:

> 
> 
> On 31.01.2024 10:09, Ralph Boehme via samba wrote:
> > On 1/31/24 09:50, Peter Milesson via samba wrote:
> >> The crucial problem here is, that Everyone (yes, really everyone)
> >> can write to the root share. 
> >
> > why don't you just change it? That's how it's supposed to work.
> >
> > -slow
> >
> Hi Ralph,
> 
> Unfortunately, that doesn't work. In share permissions,

Sorry, but you should only modify the 'Security' tab, for which a
better name would be 'NTFS permissions'
However, as I have found, you can remove 'EVERYONE' from the Security
tab permissions, but it doesn't remove it from the permissions set on
the actual share directory.

Rowland

> it's not 
> possible to remove Everyone, nor add another security object.
> Clicking OK, the dialog closes without any errors, but opening it
> again, Everyone is still there. I was sure to start Computer
> Management as Administrator.
> 
> If it would be possible to set share permissions, then it would be
> usable.
> 
> Best regards,
> 
> Peter
> 
>