<html><body><p><font size="2">Yes, that is the intended behavior. As in the section on traditional ACLs that you found, the intent is that if there is a default/inherited ACL, the object is created with that (and if there is no default/inherited ACL, then the mode and umask are the basis for the initial set of permissions).</font><br><br><font size="2">Regards, The Spectrum Scale (GPFS) team<br><br>------------------------------------------------------------------------------------------------------------------<br>If you feel that your question can benefit other users of Spectrum Scale (GPFS), then please post it to the public IBM developerWroks Forum at <a href="https://www.ibm.com/developerworks/community/forums/html/forum?id=11111111-0000-0000-0000-000000000479">https://www.ibm.com/developerworks/community/forums/html/forum?id=11111111-0000-0000-0000-000000000479</a>. <br><br>If your query concerns a potential software error in Spectrum Scale (GPFS) and you have an IBM software maintenance contract please contact 1-800-237-5511 in the United States or your local IBM Service Center in other countries. <br><br>The forum is informally monitored as time permits and should not be used for priority messages to the Spectrum Scale (GPFS) team.</font><br><br><img width="16" height="16" src="cid:1__=0ABB0BE5DFF93A018f9e8a93df938690918c0AB@" border="0" alt="Inactive hide details for "Dietrich, Stefan" ---08/08/2017 12:17:22 PM---Hello, I am currently trying to understand an issue wi"><font size="2" color="#424282">"Dietrich, Stefan" ---08/08/2017 12:17:22 PM---Hello, I am currently trying to understand an issue with ACLs and how GPFS handles the umask.</font><br><br><font size="2" color="#5F5F5F">From: </font><font size="2">"Dietrich, Stefan" <stefan.dietrich@desy.de></font><br><font size="2" color="#5F5F5F">To: </font><font size="2">gpfsug-discuss@spectrumscale.org</font><br><font size="2" color="#5F5F5F">Date: </font><font size="2">08/08/2017 12:17 PM</font><br><font size="2" color="#5F5F5F">Subject: </font><font size="2">[gpfsug-discuss] NFS4 ACLs and umask on GPFS</font><br><font size="2" color="#5F5F5F">Sent by: </font><font size="2">gpfsug-discuss-bounces@spectrumscale.org</font><br><hr width="100%" size="2" align="left" noshade style="color:#8091A5; "><br><br><br><tt><font size="2">Hello,<br><br>I am currently trying to understand an issue with ACLs and how GPFS handles the umask.<br>The filesystem is configured for NFS4 ACLs only (-k nfs4), filesets have been configured for chmodAndUpdateACL and the access is through a native GPFS client (v4.2.3).<br><br>If I create a new file in a directory, which has an ACE with inheritance, the configured umask on the shell is completely ignored.<br>The new file only contains ACEs from the inherited ACL.<br>As soon as the ACE with inheritance is removed, newly created files receive the correct configured umask.<br>Obvious downside, no ACLs anymore :(<br><br>Additionally, it looks like that the specified mode bits for an open call are ignored as well.<br>E.g. with an strace I see, that the open call includes the correct mode bits. However, the new file only has inherited ACEs.<br><br>According to the NFSv4 RFC, the behavior is more or less undefined, only with NFSv4.2 umask will be added to the protocol.<br>For GPFS, I found a section in the traditional ACL administration section, but nothing in the NFS4 ACL section of the docs.<br><br>Is my current observation the intended behavior of GPFS?<br><br>Regards,<br>Stefan<br><br>--<br>------------------------------------------------------------------------<br>Stefan Dietrich Deutsches Elektronen-Synchrotron (IT-Systems)<br> Ein Forschungszentrum der Helmholtz-Gemeinschaft<br> Notkestr. 85<br>phone: +49-40-8998-4696 22607 Hamburg<br>e-mail: stefan.dietrich@desy.de Germany<br>------------------------------------------------------------------------<br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></font></tt><tt><font size="2"><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a></font></tt><tt><font size="2"><br><br></font></tt><br><br><BR>
</body></html>