name: ignored-acls
internalName: ignoredAcls
type: StringSet
defaultExpr: |
#if linux
{"security.csm", "security.selinux", "system.nfs4_acl"}
#else
{}
#endif
defaultText: 'Linux: security.csm, security.selinux, system.nfs4_acl, other platforms: nothing.'
A list of ACLs that should be ignored, normally Lix attempts to
remove all ACLs from files and directories in the Nix store, but
some ACLs like security.selinux or system.nfs4_acl can't be
removed even by root. Therefore it's best to just ignore them.