{"action":"opened","issue":{"url":"https://api.github.com/repos/claudiofahey/isilon-hadoop-tools/issues/18","repository_url":"https://api.github.com/repos/claudiofahey/isilon-hadoop-tools","labels_url":"https://api.github.com/repos/claudiofahey/isilon-hadoop-tools/issues/18/labels{/name}","comments_url":"https://api.github.com/repos/claudiofahey/isilon-hadoop-tools/issues/18/comments","events_url":"https://api.github.com/repos/claudiofahey/isilon-hadoop-tools/issues/18/events","html_url":"https://github.com/claudiofahey/isilon-hadoop-tools/issues/18","id":167894022,"number":18,"title":"Script needs purge extended ACLs","user":{"login":"ro-ket","id":13971911,"avatar_url":"https://avatars.githubusercontent.com/u/13971911?v=3","gravatar_id":"","url":"https://api.github.com/users/ro-ket","html_url":"https://github.com/ro-ket","followers_url":"https://api.github.com/users/ro-ket/followers","following_url":"https://api.github.com/users/ro-ket/following{/other_user}","gists_url":"https://api.github.com/users/ro-ket/gists{/gist_id}","starred_url":"https://api.github.com/users/ro-ket/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ro-ket/subscriptions","organizations_url":"https://api.github.com/users/ro-ket/orgs","repos_url":"https://api.github.com/users/ro-ket/repos","events_url":"https://api.github.com/users/ro-ket/events{/privacy}","received_events_url":"https://api.github.com/users/ro-ket/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-07-27T16:11:17Z","updated_at":"2016-07-27T16:11:17Z","closed_at":null,"body":"The script needs to either **always** revert to POSIX permissions, or **optionally** allow for permissions to be reverted to POSIX permissions.\r\n\r\nThe  fixperm function (invoked in normal directory creation and in the `--fixperm` script option) assumes that only POSIX permissions exist on the directories. If there are other modes on directories (aka extended ACLs), they will not be removed.\r\n\r\nThe script needs to allow removal of all modes.\r\n\r\nI see two ways to do this. Which to implement depends on whether we decide that we require all to be completely removed, or if we only recommend all to be removed:\r\n\r\n1. If we required, simply add a `chmod -D $1` before [line 69](https://github.com/claudiofahey/isilon-hadoop-tools/blob/4176799934527adec0f25cc034eaf293e7783e1b/onefs/isilon_create_directories.sh#L69) within the `fixperm` function.  Do this before `chmod $4 $1`:\r\n\r\n>       chmod -D $1\r\n>       chmod $4 $1\r\n\r\n2. If we recommend, add a new option for the script which allows admins to revert these directories to POSIX. The `chmod -D $1 in the fixperm function.\r\n\r\n-- Default to \"no\" around lie 15:\r\n\r\n> POSIX=\"n\"\r\n\r\n-- Add command line near line 120:\r\n\r\n>      \"--posix-only\")\r\n>             echo \"Info: will remove all existing permissions, including mode equivalent of extended ACLs, before setting POSIX permissions.\"\r\n>             POSIX=\"y\"\r\n>             ;;\r\n\r\n-- Only run `chmod -D` when this flag is set. Do this before `chmod $4 $1`:\r\n\r\n>       if [ \"POSIX\" == \"y\" ] ; then\r\n>         chmod -D $1\r\n>       chmod $4 $1"}}
{"actor":{"display_login":"ro-ket"}}