I think it’s like this: what used to be group in regular permissions output is mask in ACL output. Mask sets the upper limit of what ACL can do, so if mask is rw- then it’s impossible to set a r-x ACL permission because allowing execution is not allowed.
I think it’s like this: what used to be group in regular permissions output is mask in ACL output. Mask sets the upper limit of what ACL can do, so if mask is rw- then it’s impossible to set a r-x ACL permission because allowing execution is not allowed.
Yep, it’s basically a way to define new groups per directory. But these groups are hidden from the normal group commands!