mirror of
https://github.com/samba-team/samba.git
synced 2025-01-10 01:18:15 +03:00
r24462: - Removing all ACEs was causing removal of the DACL entirely. Win2000 ignored
the request, presumably due to the PROTECTED flag not being set. Setting that flag (in make_sec_desc()) has much wider implications than just to libsmbclient, so instead of modifying that, we'll remove security descriptors by setting the number of ACEs to zero. At some point, we might want to look into whether we should actually be setting the PROTECTED flag in the DACL. Reference http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/distrib/dsce_ctl_qxju.mspx?mfr=true Derrell
This commit is contained in:
parent
0fecd8a0c3
commit
319df380e5
@ -5142,7 +5142,6 @@ cacl_set(TALLOC_CTX *ctx,
|
||||
switch (mode) {
|
||||
case SMBC_XATTR_MODE_REMOVE_ALL:
|
||||
old->dacl->num_aces = 0;
|
||||
old->dacl = NULL;
|
||||
dacl = old->dacl;
|
||||
break;
|
||||
|
||||
@ -5159,9 +5158,6 @@ cacl_set(TALLOC_CTX *ctx,
|
||||
old->dacl->aces[k+1];
|
||||
}
|
||||
old->dacl->num_aces--;
|
||||
if (old->dacl->num_aces == 0) {
|
||||
old->dacl = NULL;
|
||||
}
|
||||
found = True;
|
||||
dacl = old->dacl;
|
||||
break;
|
||||
|
Loading…
Reference in New Issue
Block a user