diff options
| author | Jeremy Allison <jra@samba.org> | 2010-09-09 15:28:43 -0700 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2010-09-09 15:28:43 -0700 |
| commit | e6b85c2a7b3cfa0dd3c9859c88e5462c616d5a2a (patch) | |
| tree | 0ea9d6c639c4ac1670ee18e6107f26f25a5228b2 | |
| parent | 9962462278e250f4ad2aa068bb6afb8015270e81 (diff) | |
| download | samba-e6b85c2a7b3cfa0dd3c9859c88e5462c616d5a2a.tar.gz samba-e6b85c2a7b3cfa0dd3c9859c88e5462c616d5a2a.tar.bz2 samba-e6b85c2a7b3cfa0dd3c9859c88e5462c616d5a2a.zip | |
More paranoia to ensure SD's can't be set on read-only shares.
Jeremy.
| -rw-r--r-- | source3/smbd/nttrans.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/source3/smbd/nttrans.c b/source3/smbd/nttrans.c index 1e4e06cf26..b602a51611 100644 --- a/source3/smbd/nttrans.c +++ b/source3/smbd/nttrans.c @@ -836,6 +836,10 @@ NTSTATUS set_sd(files_struct *fsp, uint8_t *data, uint32_t sd_len, struct security_descriptor *psd = NULL; NTSTATUS status; + if (!CAN_WRITE(fsp->conn)) { + return NT_STATUS_ACCESS_DENIED; + } + if (sd_len == 0 || !lp_nt_acl_support(SNUM(fsp->conn))) { return NT_STATUS_OK; } |