Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages


home | help
VFS_ACL_XATTR(8)	  System Administration	tools	      VFS_ACL_XATTR(8)

       vfs_acl_xattr - Save NTFS-ACLs in Extended Attributes (EAs)

       vfs objects = acl_xattr

       This VFS	module is part of the samba(7) suite.

       The vfs_acl_xattr VFS module stores NTFS	Access Control Lists (ACLs) in
       Extended	Attributes (EAs). This enables the full	mapping	of Windows
       ACLs on Samba servers.

       The ACLs	are stored in the Extended Attribute security.NTACL of a file
       or directory. This Attribute is not listed by getfattr -d filename. To
       show the	current	value, the name	of the EA must be specified (e.g.
       getfattr	-n security.NTACL filename).

       This module forces the following	parameters:

	      o	  inherit acls = true

	      o	  dos filemode = true

	      o	  force	unknown	acl user = true

       This module is stackable.

       acl_xattr:ignore	system acls = [yes|no]
	   When	set to yes, a best effort mapping from/to the POSIX ACL	layer
	   will	not be done by this module. The	default	is no, which means
	   that	Samba keeps setting and	evaluating both	the system ACLs	and
	   the NT ACLs.	This is	better if you need your	system ACLs be set for
	   local or NFS	file access, too. If you only access the data via
	   Samba you might set this to yes to achieve better NT	ACL

	   If acl_xattr:ignore system acls is set to yes, the following
	   additional settings will be enforced:

		  o   create mask = 0666

		  o   directory	mask = 0777

		  o   map archive = no

		  o   map hidden = no

		  o   map readonly = no

		  o   map system = no

		  o   store dos	attributes = yes

       acl_xattr:default acl style = [posix|windows|everyone]
	   This	parameter determines the type of ACL that is synthesized in
	   case	a file or directory lacks an security.NTACL xattr.

	   When	set to posix, an ACL will be synthesized based on the POSIX
	   mode	permissions for	user, group and	others,	with an	additional ACE
	   for NT Authority\SYSTEM will	full rights.

	   When	set to windows,	an ACL is synthesized the same way Windows
	   does	it, only including permissions for the owner and NT

	   When	set to everyone, an ACL	is synthesized giving full permissions
	   to everyone (S-1-1-0).

	   The default for this	option is posix.

       The original Samba software and related utilities were created by
       Andrew Tridgell.	Samba is now developed by the Samba Team as an Open
       Source project similar to the way the Linux kernel is developed.

Samba 4.13.1			  10/28/2020		      VFS_ACL_XATTR(8)


Want to link to this manual page? Use this URL:

home | help