Tobias Sjösten's questions

I am running Ubuntu 11.04 with the "encrypt home directory" feature. This uses eCryptFS to encrypt and mount my home directory. Now I need to enable ACL for this mount but since it's not configured in /etc/fstab I don't know how to do that.

Enabling ACL for my / mount doesn't do anything for me. These are two of mount mounts:

$ mount
/dev/sda1 on / type ext4 (rw,acl,errors=remount-ro,commit=0)
/home/tobias/.Private on /home/tobias type ecryptfs (ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_unlink_sigs,ecryptfs_sig=2be72e2e03c0d2a1,ecryptfs_fnek_sig=f8f38af9c5e2c0e2)

Any ideas on how to enable ACL for /home/tobias?

I want both my users 'tobias' and 'www-data' to be able to read and write to a specific directory.

To that end I have chowned it to tobias:www-data, added tobias to the www-data group and added setguid to the directory. Files and subdirectories are correctly created with www-data group owning them.

The next step is, as I understand it, using ACL to have a certain umask for this specific directory. I want it to be 002, so that content are given rw-rw-r permission. So I added 'acl' to my mount in /etc/fstab and remounted the disk. So far so good.

Here is the ACL configuration for my directory:

$ getfacl app/cache/
# file: app/cache/
# owner: tobias
# group: www-data
# flags: -s-
user::rwx
user:www-data:rwx
user:tobias:rwx
group::rwx
mask::rwx
other::r-x
default:user::rwx
default:user:www-data:rwx
default:user:tobias:rwx
default:group::rwx
default:mask::rwx
default:other::r-x

But even with my ACL set up it still creates new files and subdirectories with rw-r--r-- permission. So either I have done something wrong or I have misunderstood the concept. Could anyone please help me figure out which and what I should do to make it work?