hesela.devDefault ACL
A default ACL is a directory-associated permission template used to initialize the access ACL of newly created child objects.
Creation: on Linux, a default ACL replaces normal umask processing, but requested creation-mode bits still constrain the inherited access ACL. This differs from the ACL mask itself. [2]
Measured contrast: with umask 0077, a requested 0666 creation yielded 0600 without a default ACL but 0660 with the probe's template. Requesting 0600 under the template retained the named entry while masking its permissions to zero. [3]
Recovery scope: preserve directory defaults separately from current file ACLs when future child creation is part of the required behavior. Do not assume changing a default retroactively updates existing children. [1]
Relations
Limitations
- Preserving metadata alone does not establish successful access under the destination's identities and security policy.