To set a default ACL, add
d: before the rule and specify a directory instead of a file name.
For example, to set the default ACL for the
/share/ directory to read and execute for users not in the user group (an access ACL for an individual file can override it):
setfacl -m d:o:rx /share