encfs does not honor permissions from setfacl

[Todd A. Jacobs]

Binary package hint: encfs

Files stored in an encfs container do not appear to honor ACL permissions set through setfacl, either on the encrypted or decrypted files. For example, given container .secret_encfs and user1 as the current owner:

  cd .secret_encfs
  setfacl -R -m u:user2:rwx *
  setfacl -R -m u:user2:rwx .*
  setfacl -R -m default:u:user2:rwx .
  setfacl -R -m default:mask:rwx .

should allow user2 to mount the encfs filesystem with full permissions, but the filesystem is unmountable unless the files are all chmod 644, and the extended ACLs are ignored for reading/writing by user2 even after mounting.

Because encfs is using the permissions of the underlying filesystem, the expectation is that ACLs would be honored. Without ACLs, it makes it much harder to transfer encfs directories between systems without intervention by root.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: encfs 1.5.2-2
ProcVersionSignature: Ubuntu 2.6.32-24.42-generic 2.6.32.15+drm33.5
Uname: Linux 2.6.32-24-generic x86_64
Architecture: amd64
Date: Wed Sep 8 11:58:20 2010
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release amd64 (20100429)
ProcEnviron:
 PATH=(custom, user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: encfs