<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body>
<div dir="auto">I don't remember the exact method, but you want to remove ACL support completely - whether from the FS, Samba, or the share. Office will always do this - but it should be a "so what" moment.</div>
<div dir="auto" style="color: rgb(33, 33, 33); background-color: rgb(255, 255, 255);">
<br>
</div>
<div dir="auto" style="color: rgb(33, 33, 33); background-color: rgb(255, 255, 255);">
IMHO you're focused on a band-aid for the symptom, not the problem. The problem is why does this seemingly-innocuous ACL cause problems? Possibly also why does Samba not translate that back into ordinary UNIX permissions, which in this case looks like fully
reversible transform.</div>
<div dir="auto" style="color: rgb(33, 33, 33); background-color: rgb(255, 255, 255);">
<br>
</div>
<div dir="auto" style="color: rgb(33, 33, 33); background-color: rgb(255, 255, 255);">
-Adam</div>
<div><br>
</div>
<div id="ms-outlook-mobile-signature" dir="auto">Get <a href="https://aka.ms/AAb9ysg">
Outlook for Android</a></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Roundtable <roundtable-bounces@muug.ca> on behalf of Trevor Cordes <trevor@tecnopolis.ca><br>
<b>Sent:</b> Friday, January 6, 2023 8:50:39 PM<br>
<b>To:</b> MUUG RndTbl <roundtable@muug.ca><br>
<b>Subject:</b> [RndTbl] weird samba ACLs from MS Office</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Have samba (4.16) sharing some linux drives to Windows. Want things<br>
pretty simple where files on the share are all forced into certain user,<br>
gorup, mode:<br>
<br>
force create mode = 0660<br>
force directory mode = 02770<br>
force user = samba<br>
<br>
Everything works great. The files get created like this:<br>
<br>
-rw-rw---- 1 samba samba 0 Jan 4 01:01 test-file.txt<br>
<br>
... With every app except MS Office. MS Office insists on making some<br>
fubar ACL:<br>
<br>
-rw-rwx---+ 1 samba samba 50510 Jan 4 01:13 test-excel.csv*<br>
<br>
#getfacl test-excel.csv<br>
# file: test-excel.csv<br>
# owner: samba<br>
# group: samba<br>
user::rw-<br>
user:samba:rw-<br>
group::rw-<br>
group:samba:rw-<br>
mask::rwx<br>
other::---<br>
<br>
Looks like the same thing, eh? But that ACL screws up linus backups as it<br>
is stopping a user who is in group samba from reading the file!!?!??<br>
<br>
But I don't even want to solve that riddle (because they should be able to<br>
read it), I just want to force samba to not let (or just ignore) Office<br>
make an ACL in the first place. I don't want any files where ls says "+"<br>
in the mode!<br>
<br>
I swear this didn't use to happen. Might have been years ago, though.<br>
All the samba ACL options seem to be to get "more" ACLs. I want less!<br>
None!<br>
<br>
But I don't want to mount the linux fs itself with ACLs off. I just want<br>
to force samba to force Office to not be insane.<br>
<br>
Anyone know the magic for this?<br>
_______________________________________________<br>
Roundtable mailing list<br>
Roundtable@muug.ca<br>
<a href="https://muug.ca/mailman/listinfo/roundtable">https://muug.ca/mailman/listinfo/roundtable</a><br>
</div>
</span></font></div>
</body>
</html>