I'm trying to set up a proper ACL permission model on a shared directory using ACLs, but I'm having problems. Even though I've set a default "user:user1:rwx", files created by user2 are not writable by user1, because of the mask calculation. It says effective is "r--".
According to the man page, the mask is calculated by doing a union of the owning group, other named groups and named users. Only permissions that all of these have, will be enabled in the mask (the union part).
But why? If it does that, how can I just say "user user1 can read and write, always"?
Plus, user1 can't write to files created by user2, but it can delete them...
This is the current acl of a directory in question:
# file: NNHD/ # owner: user1 # group: user1 user::rwx user:user1:rwx user:user2:rwx group::r-x mask::rwx other::--- default:user::rwx default:user:user1:rwx default:user:user2:rwx default:group::rwx default:mask::rwx default:other::---
This has proper masks.
When user2 creates a file in that directory, it is given this:
# file: test # owner: user2 # group: user2 user::rw- user:user1:rwx #effective:r-- user:user2:rwx #effective:r-- group::rwx #effective:r-- mask::r-- other::---
I don't understand why that happens... What must I do to make it writable for user1?