On 2023-01-07 Adam Thompson wrote:
I don't remember the exact method, but you want to remove ACL support completely - whether from the FS, Samba, or the share. Office will always do this - but it should be a "so what" moment.
Well, if the ACL isn't doing anything, it's just wasting a block on my disk, and slowing down access to the file as yet another block has to be looked at. Ya, not a big deal, but you know me, I'm persnickety.
IMHO you're focused on a band-aid for the symptom, not the problem. The problem is why does this seemingly-innocuous ACL cause problems? Possibly also why does Samba not translate that back into ordinary UNIX permissions, which in this case looks like fully reversible transform.
Yes, it does, doesn't it. I have a feeling it might have something to do with the strange "full-control" mapping samba does, and there are tuneables for that.
Open to more ideas! I'll toy with the samba options to see if I can get it to return to sanity.
I guess I can poke around more to see why group samba can't read with that ACL... thought it's so bonkers that I didn't even want to go down that rabbit hole.
Trying really hard to not do one suggestion: cron.daily find -exec setfacl -b {} ;
Lastly, wonder why no other app besides Office does this...