[Acl-Devel] Behaviour of 'file group' acl entries

[Kevin Shanahan]

Hi,

I've only just started looking at ACLs on Linux, so I'm not sure if what
I'm seeing here is a bug or just that I don't understand how things are
supposed to work.

I'm seeing what looks like a mismatch between the 'file group' ACL entry
permissions and the standard unix permissions; for example on this
directory:

hermes:/srv/new-samba# ls -ld software/
drwxrws---+ 151 root WUM3\it - dataadm 4096 Apr 19 22:13 software/
hermes:/srv/new-samba# getfacl software
# file: software
# owner: root
# group: WUM3\134it\040-\040dataadm
user::rwx
user:WUM3\134administrator:rwx
group::r-x
group:WUM3\134it\040-\040general:r-x
group:WUM3\134it\040-\040manager:rwx
mask::rwx
other::---
default:user::rwx
default:user:WUM3\134administrator:rwx
default:group::r-x
default:group:WUM3\134it\040-\040general:r-x
default:group:WUM3\134it\040-\040manager:rwx
default:mask::rwx
default:other::---

Am I right in understanding that the group::... entry should always
match the unix permissions? Or does the setgid bit somehow throw a
spanner in the works?

Thanks,
Kevin.