acl
1 note
- Default ACL shows #effective:--- on files an app rewrites with mode 0600 (certbot keys, Home Assistant auth)
A default ACL granting a backup user read access worked, then broke after certbot issued a key or Home Assistant rewrote .storage/auth. Files created with mode 0600 get an ACL mask of ---, so the inherited entry shows #effective:---. Re-running setfacl -m recomputes the mask; run it from cron before each backup.