ACLs on a shared directory don't seem to work from within a container

LXD
1

I have created a shared directory /share/test_data on the host and given read permissions to a container using a profile.
The directory is owned by a user on the host. When it’s world readable, a user from within the container can read the shared directory. When, however, I take away the world read permission and instead set a read permission for the numerical ID the user in the container has on the host, the user from within the container cannot read anymore. Also, the permissions look strange, only showing question marks, like this:

user@rs-base:~$ ls -l /share/test_data/
ls: cannot access ‘/share/accounting_data/testdir’: Permission denied
ls: cannot access ‘/share/accounting_data/test’: Permission denied
total 0
d??? ? ? ? ? ? testdir
-??? ? ? ? ? ? test

Why is this not working?

2

read isn’t sufficient on directories, you need execute for traversal to be possible.

3

Of course! How could I miss that?
Thank you!