-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 #$ setfacl -m u:mf:r bla #$ getfacl bla # file: bla # owner: root # group: root user::rw- user:mf:r-- group::r-- mask::r-- other::r-- It is readable by mf like intended. #$ chmod go-rwx bla #$ getfacl bla # file: bla # owner: root # group: root user::rw- user:mf:r-- #effective:--- group::r-- #effective:--- mask::--- other::--- It is not readable no more by mf which was not intended. Obviously the mask:: is cleared, but why ? OTOH group::r ? Confused am i - -- Regards, markus -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkxE6wEACgkQYoWFBIJE9eVXMwCfRWhN2OKvi4WyJUumB7leuCGY v3UAoIEAzpq+m96IQeilRIXSAdNEU6km =FOj6 -----END PGP SIGNATURE-----