diff options
| author | Jeremy Allison <jra@samba.org> | 2013-06-20 14:33:30 -0700 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2013-06-24 19:33:34 +0200 |
| commit | b00d9d245390a54c5b057915472e0e8b3a7f6bb9 (patch) | |
| tree | 9abfd4c381ce71475593c90a75f8d70942e1dfb9 /docs-xml/smbdotconf/security/maptoguest.xml | |
| parent | 398ee49bda81e84c0f1e530bac02fb0fdc869afa (diff) | |
| download | samba-b00d9d245390a54c5b057915472e0e8b3a7f6bb9.tar.gz samba-b00d9d245390a54c5b057915472e0e8b3a7f6bb9.tar.bz2 samba-b00d9d245390a54c5b057915472e0e8b3a7f6bb9.zip | |
Use existing "acl map full control" parameter to control the adding of the DELETE_CHILD parameter on NFSv4/ZFS/GPFS file ACE's.
Windows maps an open request of GENERIC_ALL on files to 0x1FF specific bits, which
includes DELETE_CHILD even though this has no meaning on file ACE's. If a returned
NFSv4 ACE entry for a file has all other specific bits set except for DELETE (which
comes from the containing directory) and DELETE_CHILD (which has no meaning) then
optionally add it into the returned ACE entry.
This is using the same parameter in the same way as it is currently used
in smbd/posix_acls.c. Note that as this parameter is on by default, it
is already being tested in the existing raw.acl tests.
Fixes issue with Microsoft SMB2 torture test suite found at the interop event
in Redmond, WA.
Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Ira Cooper <ira@samba.org>
Diffstat (limited to 'docs-xml/smbdotconf/security/maptoguest.xml')
0 files changed, 0 insertions, 0 deletions