On Tue, Jul 12, 2016 at 9:11 PM, J. Bruce Fields [off-list ref] wrote:

On Tue, Jul 12, 2016 at 07:56:00AM -0400, Jeff Layton wrote:

quoted

Barf. AI seems like a trainwreck waiting to happen. What are the
chances that userland is going to get this right?

This is just taken from Windows, so presumably Samba should do the right
thing (with one workaround required--see the discussion of PROTECTED in
the changelog).

quoted

Still, I do applaud the fact that you're just doing the bare minimum in
kernel to support userland apps that want this. Thanks for not trying
to push the propagation of the changed ACEs into the kernel.

Agreed.  But, again, this is just what Windows does.  (I wonder whether
there's an OS that's actually tried do any sort of atomic propagation.)

NetWare's NSS filesystem did have automatic propagation, but I think
that was implemented by composing the permissions along the path to a
file at access time.

Andreas