diff options
author | Jeremy Allison <jra@samba.org> | 2008-10-08 18:06:58 -0700 |
---|---|---|
committer | Jeremy Allison <jra@samba.org> | 2008-10-08 18:06:58 -0700 |
commit | 543c6a02ae1dcb903de800c88af1f9e221827d61 (patch) | |
tree | 32ae5ccf825b1f67f7d22e1ec4e4d9efc00e48ee /source3/include | |
parent | 88a58ae0eeb553969c903a94e578375e109ad05a (diff) | |
download | samba-543c6a02ae1dcb903de800c88af1f9e221827d61.tar.gz samba-543c6a02ae1dcb903de800c88af1f9e221827d61.tar.bz2 samba-543c6a02ae1dcb903de800c88af1f9e221827d61.zip |
For the vfs_acl_xattr.c module, make sure we map GENERIC file and directory bits
to specific bits every time a security descriptor is set. The S4 torture suite proves
that generic bits are not returned when querying an ACL set using them (ie. only
the specific bits are stored on disk).
Jeremy.
Diffstat (limited to 'source3/include')
-rw-r--r-- | source3/include/proto.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/source3/include/proto.h b/source3/include/proto.h index 535adf7e2f..b7e363253f 100644 --- a/source3/include/proto.h +++ b/source3/include/proto.h @@ -1431,6 +1431,7 @@ WERROR registry_push_value(TALLOC_CTX *mem_ctx, /* The following definitions come from lib/util_seaccess.c */ void se_map_generic(uint32 *access_mask, const struct generic_mapping *mapping); +void security_acl_map_generic(struct security_acl *sa, const struct generic_mapping *mapping); void se_map_standard(uint32 *access_mask, struct standard_mapping *mapping); bool se_access_check(const SEC_DESC *sd, const NT_USER_TOKEN *token, uint32 acc_desired, uint32 *acc_granted, |