ZFS ACL (NFS4 ACL)

Question

I'm using Openindiana (Solaris 10) containers and I want to let users upload web content over sftp I'v managed to setup internal-sftp of openssh and lock user under web root. All the files under web root should be owned by sftp user but at the same time web server should have read access to all these files. It works well by using ACL like

chmod -R A3+user:www:list_directory/read_data/execute:file_inherit/dir_inherit:allow htdocs/

But whenever user tries to chmod 777 directory to be web server writable the directory looses it's ACLs. Denying write_acl denies user to change even discretionary access control attributes

Ideally user should upload content by sftp, web server should have read access and full access to 777 directories Any idea on how to achieve that?

Answer 1

On Solaris, chmod 777 is setting an absolute mode. Absolute means absolute. If you want to keep ACLs, you need to use symbolic mode.

See the man page: http://docs.oracle.com/cd/E23824_01/html/821-1461/chmod-1.html#scrolltoc