This might not actually be the best option. A better solution, as suggested by Jeff Altman, might be to not list the ACL attributes at all. This would only affect listxattr() - getxattr() and setxattr() would still work for them. David