Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 20 Mar 2003 22:02:31 +0100
From:      "Ritz, Bruno" <britz@hsr.ch>
To:        <FreeBSD-gnats-submit@FreeBSD.org>
Subject:   kern/50148: Incorrect applied default ACLs
Message-ID:  <GNENKHPCNMLFKGMPLJONEEFMCEAA.britz@hsr.ch>

next in thread | raw e-mail | index | archive | help

>Number:         50148
>Category:       kern
>Synopsis:       Incorrect applied default ACLs
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Mar 20 13:10:12 PST 2003
>Closed-Date:
>Last-Modified:
>Originator:     Ritz Bruno
>Release:        FreeBSD 5.0-CURRENT i386
>Organization:
(Private)
>Environment:
System: FreeBSD ritz-bruno-srv.local 5.0-CURRENT FreeBSD 5.0-CURRENT #0: Tue Mar
18 23:37:22 CET 2003 root@ritz-bruno-srv.local:/usr/obj/usr/src/sys/SERVER i386


>Description:
        When the default ACL for a directory does not give any right to the
"default" group, but some rights (rwx) to another group, newly created
subdirectories will get some strange ACLs (group::--- group::rwx)? This only
happens for groups, users do not seem to have this problem.

Here is the ACL setup for the directory:
setfacl -dm u::rwx,g::---,o::---,g:mygroup:rwx mydirectory
setfacl -m g:mygroup:rwx mydirectory

Then the new directory was created with mkdir mydirectory/subdir

getfacl mydirectory/subdir returns:
#file:test/
#owner:0
#group:1000
user::rwx
group::---
group::rwx              # effective: r-x *** GROUP NAME MISSING ***
mask::r-x
other::---

>How-To-Repeat:
        (See above)


>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?GNENKHPCNMLFKGMPLJONEEFMCEAA.britz>