Re: [zfs-discuss] /usr/bin/chgrp destroys ACL's?

2010-02-11 Thread Paul B. Henson
On Wed, 10 Feb 2010, David Dyer-Bennet wrote: My experience with ACLs is that they suck dead diseased rats through a straw and I wish I could turn them off. That seems overly harsh ;). What I would dearly love is an option to disable all ACL suppport. If you never explicitly use ACL's on

[zfs-discuss] /usr/bin/chgrp destroys ACL's?

2010-02-10 Thread Paul B. Henson
We have an open bug which results in new directories created over NFSv4 from a linux client having the wrong group ownership. While waiting for a patch to resolve the issue, we have a script running hourly on the server which finds directories owned by the wrong group and fixes them. One of our

Re: [zfs-discuss] /usr/bin/chgrp destroys ACL's?

2010-02-10 Thread Richard Elling
CC'ed to security-disc...@opensolaris.org -- richard On Feb 10, 2010, at 4:45 PM, Paul B. Henson wrote: We have an open bug which results in new directories created over NFSv4 from a linux client having the wrong group ownership. While waiting for a patch to resolve the issue, we have a

Re: [zfs-discuss] /usr/bin/chgrp destroys ACL's?

2010-02-10 Thread Jason King
On Wed, Feb 10, 2010 at 6:45 PM, Paul B. Henson hen...@acm.org wrote: We have an open bug which results in new directories created over NFSv4 from a linux client having the wrong group ownership. While waiting for a patch to resolve the issue, we have a script running hourly on the server

Re: [zfs-discuss] /usr/bin/chgrp destroys ACL's?

2010-02-10 Thread Paul B. Henson
On Wed, 10 Feb 2010, Jason King wrote: I suspect that zfs is interpreting the group ACLs and adjusting the mode value accordingly to try to indicate the 'preserve owner/group on new file' semantics with the old permissions, however it sounds like it's not a symmetric operation -- if chgrp

Re: [zfs-discuss] /usr/bin/chgrp destroys ACL's?

2010-02-10 Thread David Dyer-Bennet
On 2/10/2010 9:36 PM, Jason King wrote: rant type=mini My experience (perhaps others will have different experiences) is that due to the added complexity and administrative overhead, ACLs are used when it's absolutely necessary -- i.e. you have something that due to it's nature must have very