Nils,

I did post it on zfs.discuss when I realized it was a better place.
I did get a good reply:

> The entry with the inheritance flags of "fdi" is an inherit only ACE which 
> does NOT affect access control and is used for future propagation to children 
> of the new directory.
> 
> This is done since chmod(2) *may* under some situations alter/reduce the 
> permission(s) of ACEs that affect access control.  A chmod(2) operation never 
> alters "inherit only" ACEs.  This then allows future directories/files to 
> always inherit the same ACL as its parent, or parents parent and so on. 


Andrew


> Hi Andrew,
> 
> this is interesting, I can reproduce the behavor on snv_111.
> 
> One might argue that converting one :fd- ACE into a :fdi (inherit only) 
> a non-inheritable ACE upon inheritance is semantically equivalent, but I 
> don't understand yet why this is happening. I'll have a look.
> 
> BTW, moving this discussion to zfs.discuss might be more appropriate, as 
> this seems to be a general ZFS issue not limited to NFSv4.
> 
> Nils


Reply via email to