<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic fsecurity apply run clears all unix mode bits on qtree with NTFS permissions in 7-mode in ONTAP Discussions</title>
    <link>https://community.netapp.com/t5/ONTAP-Discussions/fsecurity-apply-run-clears-all-unix-mode-bits-on-qtree-with-NTFS-permissions-in/m-p/136858#M30165</link>
    <description>&lt;P&gt;I ran &lt;FONT face="courier new,courier"&gt;fsecurity apply&lt;/FONT&gt; on a folder on my filer (NetApp Release 8.2.4P4 7-Mode) to apply new ACLs to the folder and all subfolders and files in it. Here is the contents of the security.conf file I applied:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier"&gt;cb56f6f4&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;1,0,"/vol/vol1/topics/DL/",0,"D:_(A;CIOI;0x1f01ff;;;DE\filer_users)" (The underscore is actually not there)&lt;BR /&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;fsecurity finished sucessfully and looking at the ACLs from windows looked good.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;We also mount this share on our Linux computers (Ubuntu 16.04, NFS vers. 4). To my surprise the Linux permissions were all removed and looked like this:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier"&gt;d--------- 13 root&amp;nbsp;&amp;nbsp;&amp;nbsp; nobody 4096 Dec&amp;nbsp; 4 16:30 docs&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;----------&amp;nbsp; 1 fred &amp;nbsp;&amp;nbsp; nobody 9728 Dec 20 09:48 Thumbs.db&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Also, the group was changed to "nobody". This is causing problems for the users. If you try to write a file, you get a "read only" warning. Writing is still possible, since the ACL allows writing, but you have to explicitly tell the programs to ignore the "read only" warning.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Since chmod and chgrp commands are ignored, how can I set the permission mode to something like "rwxrwx---", which should be the default? What have I done wrong with the&lt;FONT face="courier new,courier"&gt; fsecurity apply&lt;/FONT&gt; run?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Andreas&lt;/P&gt;</description>
    <pubDate>Wed, 04 Jun 2025 14:13:15 GMT</pubDate>
    <dc:creator>USER_2000</dc:creator>
    <dc:date>2025-06-04T14:13:15Z</dc:date>
    <item>
      <title>fsecurity apply run clears all unix mode bits on qtree with NTFS permissions in 7-mode</title>
      <link>https://community.netapp.com/t5/ONTAP-Discussions/fsecurity-apply-run-clears-all-unix-mode-bits-on-qtree-with-NTFS-permissions-in/m-p/136858#M30165</link>
      <description>&lt;P&gt;I ran &lt;FONT face="courier new,courier"&gt;fsecurity apply&lt;/FONT&gt; on a folder on my filer (NetApp Release 8.2.4P4 7-Mode) to apply new ACLs to the folder and all subfolders and files in it. Here is the contents of the security.conf file I applied:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier"&gt;cb56f6f4&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;1,0,"/vol/vol1/topics/DL/",0,"D:_(A;CIOI;0x1f01ff;;;DE\filer_users)" (The underscore is actually not there)&lt;BR /&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;fsecurity finished sucessfully and looking at the ACLs from windows looked good.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;We also mount this share on our Linux computers (Ubuntu 16.04, NFS vers. 4). To my surprise the Linux permissions were all removed and looked like this:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier"&gt;d--------- 13 root&amp;nbsp;&amp;nbsp;&amp;nbsp; nobody 4096 Dec&amp;nbsp; 4 16:30 docs&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;----------&amp;nbsp; 1 fred &amp;nbsp;&amp;nbsp; nobody 9728 Dec 20 09:48 Thumbs.db&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Also, the group was changed to "nobody". This is causing problems for the users. If you try to write a file, you get a "read only" warning. Writing is still possible, since the ACL allows writing, but you have to explicitly tell the programs to ignore the "read only" warning.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Since chmod and chgrp commands are ignored, how can I set the permission mode to something like "rwxrwx---", which should be the default? What have I done wrong with the&lt;FONT face="courier new,courier"&gt; fsecurity apply&lt;/FONT&gt; run?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Andreas&lt;/P&gt;</description>
      <pubDate>Wed, 04 Jun 2025 14:13:15 GMT</pubDate>
      <guid>https://community.netapp.com/t5/ONTAP-Discussions/fsecurity-apply-run-clears-all-unix-mode-bits-on-qtree-with-NTFS-permissions-in/m-p/136858#M30165</guid>
      <dc:creator>USER_2000</dc:creator>
      <dc:date>2025-06-04T14:13:15Z</dc:date>
    </item>
  </channel>
</rss>

