Steve,
The commit 438e2116d7bd ("cifs: Change translation of
STATUS_PRIVILEGE_NOT_HELD to -EPERM") regressed getcifsacl(1) because it
expects -EIO to be returned from getxattr(2) when the client can't read
system.cifs_ntsd_full attribute and then fall back to system.cifs_acl
attribute. Either -EIO or -EPERM is wrong for getxattr(2), but that's a
different problem, though.
Reproduced against samba-4.22 server.
