sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Code

Make refusal of SEC_DESC_DACL_PROTECTED configurable

Browse Source 
This adds a parameter "gpfs:refuse_dacl_protected" that defaults to false.

GPFS has no place to store the SEC_DESC_DACL_PROTECTED ACL bit. With this
parameter we give customers an option to either ignore this bit or refuse
setting an ACL with it.
This commit is contained in:
Volker Lendecke 2009-08-13 06:33:16 +02:00 committed by Michael Adam
parent 5feff0ba01
commit c54a8db006
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
source3/modules/vfs_gpfs.c
View File

@ -446,7 +446,9 @@ static NTSTATUS gpfsacl_set_nt_acl_internal(files_struct *fsp, uint32 security_i
if (acl->acl_version&GPFS_ACL_VERSION_NFS4)
{
if ((psd->type&SEC_DESC_DACL_PROTECTED)) {
if (lp_parm_bool(fsp->conn->params->service, "gpfs",
"refuse_dacl_protected", false)
&& (psd->type&SEC_DESC_DACL_PROTECTED)) {
DEBUG(2, ("Rejecting unsupported ACL with DACL_PROTECTED bit set\n"));
return NT_STATUS_NOT_SUPPORTED;
}