SMB explicitly setting permissions on new files?

Description

I recently noticed this when I updated a windows-based setup executable on a share, and all the sudden nobody could launch it. When I investigated, it seems that FreeNAS has begun manually specifying extra ACLs on created files.

For instance, in the shared directory I have a subdirectory with the permissions of "Everyone: Full Control, Domain Users: Full Control, Normal User: Full Control", that is inherited by all subfolders and files (and the foilder itself).
If I now create a file, said file gets "Special" permissions for Everyone, Domain Users, and the creating user of Read and Write, not inherited.

Noticed in FreeNAS-11.3-MASTER-201910231132, it's probably happened earlier and I haven't noticed, will have to sift through files and ACLs to see when this started happening...

Problem/Justification

None

Impact

None

Linked work items

duplicates

NAS-104158

Change default of zfs_acl_chmod_enable in ixnas to "false"

SmartDraw Connector

Katalon Manual Tests (BETA)

Activity

Show:

Andrew Walker

December 2, 2019 at 11:50 AM

Thanks for confirming the fix. I'll go ahead and close out the ticket. Once again, thank you for filing these bug reports against the nightly branch / betas.

Anthony Takata (Tsaukpaetra)

December 1, 2019 at 4:13 AM

Ah yes, seems to be working correctly now. 👍

Andrew Walker

November 30, 2019 at 5:54 AM

(edited)

Hi Anthony,
Thanks for testing this. I'm aware of the issue. I believe it was caused by some changes in how we were handling VFS_CHMOD in Samba. I believe I fixed the issue yesterday, so please try upgrading to the latest nightly and see if the issue still persists.

Resize issue view side panel

Duplicate

Details

Assignee

Andrew Walker

Reporter

Anthony Takata (Tsaukpaetra)

Components

Directory Services

SMB

Fix versions

N/A

Priority

Low

More fields

Katalon Platform

Created November 30, 2019 at 1:37 AM

Updated July 1, 2022 at 4:47 PM

Resolved December 2, 2019 at 11:50 AM