I've confirmed this on upstream 3.5-rc1 and Ubuntu 3.2.0-24.39-generic
** Changed in: ecryptfs-utils (Ubuntu)
Status: New => Invalid
** Changed in: ecryptfs
Assignee: (unassigned) => Tyler Hicks (tyhicks)
** Summary changed:
- ACL not working properly
+ Default ACL masks not working properly in eCryptfs
** Description changed:
Originally discovered when installing latest git from original sources,
see discussion here http://marc.info/?t=133882478900001&r=1&w=2
-
cat /proc/version_signature
Ubuntu 3.2.0-25.40-generic 3.2.18
- From the mailing list:
- ------------------------------------------
- OK, here's the _real_ issue. Git creates with mode 0444, which should
- still allow read in the mask. But it's the restrictive umask at the top
- of the test script that causes the problem. Try this:
+ Test case from Jeff King (the setfacl command was incorrect in the
+ original email from Jeff):
- setfacl -m m:rwx .
- perl -MFcntl -e 'sysopen(X, "a", O_WRONLY|O_CREAT, 0444)'
- umask 077
- perl -MFcntl -e 'sysopen(X, "b", O_WRONLY|O_CREAT, 0444)'
- getfacl a b
+ setfacl -dm m:rwx .
+ perl -MFcntl -e 'sysopen(X, "a", O_WRONLY|O_CREAT, 0444)'
+ umask 077
+ perl -MFcntl -e 'sysopen(X, "b", O_WRONLY|O_CREAT, 0444)'
+ getfacl a b
On ext4, both files will have the read bit set in the mask. On ecryptfs,
- "b" will have an empty mask. I think the wrong thing is that we should
- not be respecting umask at all when default ACLs are in play, and
- ecryptfs is getting that wrong. But I'm having trouble digging up an
- authoritative source.
-
- -Peff
- ---
- Reading the withdrawn posix 1003.1e and "man 5 acl", it seems pretty
- clear that if a default ACL is present, it should be used, and umask
- consulted only if it is not (so the umask should not be making a
- difference in this case).
+ "b" will have an empty mask.
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: ecryptfs-utils 96-0ubuntu3
ProcVersionSignature: Ubuntu 3.2.0-25.40-generic 3.2.18
Uname: Linux 3.2.0-25-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.0.1-0ubuntu9
Architecture: amd64
Date: Tue Jun 5 22:37:36 2012
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111012)
SourcePackage: ecryptfs-utils
UpgradeStatus: Upgraded to precise on 2012-02-18 (108 days ago)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1009207
Title:
Default ACL masks not working properly in eCryptfs
To manage notifications about this bug go to:
https://bugs.launchpad.net/ecryptfs/+bug/1009207/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
