Due to a typo in posix_acl.c:ensure_canon_entry_valid_on_set the function returns invalid ACLs in some cases. Specifically it genereates a SMB_ACL_GROUP for a SMB_ACL_GROUP_OBJ, where the required SMB_ACL_GROUP ace is already present. This can result in a failure of acl_valid in vfs_acl_xattr.
Created attachment 8177 [details] Fix typo in the got_duplicate_group code
Created attachment 8178 [details] git-am fix for 4.0.0.rc.next
Original patch applies to master (I'll push) but not to 4.0.0.rc.next. Jeremy.
Pushed to autobuild-v4-0-test.
Pushed to v4-0-test. Closing out bug report. Thanks!