X-Git-Url: https://gitweb.michael.orlitzky.com/?p=apply-default-acl.git;a=blobdiff_plain;f=run-tests.sh;h=4df37b9ec594d04744e35d9ed6d4044340be4d72;hp=a01d47c1922df9481ecb7213405593b8956776d5;hb=2c0cec434f75b206f33afd4972db4b2bf2f92fb6;hpb=a95072ea297e696f410c2f3a08586acb025677d7

diff --git a/run-tests.sh b/run-tests.sh
index a01d47c..4df37b9 100755
--- a/run-tests.sh
+++ b/run-tests.sh
@@ -229,3 +229,28 @@ EOF
 
 ACTUAL=`getfacl --omit-header "${TARGET}"`
 compare
+
+
+# If the default ACL mask denies execute, we should respect that
+# regardless of the existing execute permissions.
+TESTNUM=10
+TARGET="${TESTDIR}"/foo
+touch "${TARGET}"
+chmod 777 "${TARGET}"
+setfacl -m user:mail:rwx "${TESTDIR}"
+setfacl -d -m user:mail:rwx  "${TESTDIR}"
+setfacl -d -m mask::rw-  "${TESTDIR}"
+./aclq "${TARGET}"
+
+EXPECTED=$(cat <<EOF
+user::rwx
+user:mail:rwx	#effective:rw-
+group::r-x	#effective:r--
+mask::rw-
+other::r-x
+
+EOF
+)
+
+ACTUAL=`getfacl --omit-header "${TARGET}"`
+compare