I don't understand the behavior of extended attributes. Let's say I have a file that does not have rwx access for group.
$ ls -lah test.txt -rw------- 1 sami staff 0 july 5 20:22 test.txt
Now I want to give rwx access to a specific user called koti:
$ setfacl -m u:koti:rwx test.txt $ ls -lah test.txt -rw-rwx---+ 1 sami staff 0 july 5 20:22 test.txt
For some reason, now ls shows that group "staff" has rwx access to the file?