Thanks for the clarification.

2010/12/29 TAKAHASHI Motonobu <[email protected]>

> 2010/12/29 David Roid <[email protected]>:
> > Further experiment reveals that if "vfs objects" is removed then "create
> > mask" works. I know vfs_acl_xattr is needed to keep windows ACL here ( I
> > suppose it's step1 ), but why doesn't it honor mask options ( step2 and
> > step3 )? Or settings in the share above are just not supposed to work
> > together?
>
> vfs_acl_xattr sets "inherit acls = yes" automatically.
>
> "inherit acls = yes" makes permission of files newly created inherited
> from the default acls of their parent directory regardless of create mask
> or
> such kind of parameters.
>
> > ... the final permission is caculated by below filters in the order used
> by
> > Samba:
> > 1. Apply any DOS attribute mapping options              << I take this as
> > either map DOS attributes to execute bits, or store DOS attributes in
> > extended attributes. Correct?
> > 2. Apply the create mask settings
> > 3. Apply the force create mode settings.
>
> If neither "inherit acls" nor "inherit permissions" is set, you are right.
>
> ---
> TAKAHASHI Motonobu <[email protected]>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to