I'm seeing strange behaviour with setfacl setting the eXecute bit on the group permission for files in some situations, confirmed on CentOS 7.

As user root with unmask 0002:

mkdir foo
touch foo/bar
setfacl -Rdm u:jburchell:rwX foo
setfacl -Rm u:jburchell:rwX foo
touch foo/baz
ls -l foo

-rw-rw-r--+ bar
-rw-rw-r--+ baz

Now, this is where I'm seeing odd behaviour:

setfacl -Rdm u:user2:rwX foo
setfacl -Rm u:user2:rwX foo
ls -l foo

-rw-rw-r--+ bar
-rw-rwxr--+ baz # note the eXecute bit

It seems that the last set of setfacl commands "forget" that we specified capital X originally and not lowercase x. If I use the -n (don't recalculate mask) flag this behaviour does not happen.

Why does this happen, is it a bug?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.