diff options
| author | Jeremy Allison <jra@samba.org> | 2008-11-08 22:57:57 -0800 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2008-11-08 22:57:57 -0800 |
| commit | 813bf8b4f463199b7c2d3cddab7056b8a68a0b70 (patch) | |
| tree | 885592519c4e174f744e0dba3d9c4c9a1340c74e /source3/lib/secdesc.c | |
| parent | 5a33e906f651ea84ec909fd6453e13a9489bd391 (diff) | |
| download | samba-813bf8b4f463199b7c2d3cddab7056b8a68a0b70.tar.gz samba-813bf8b4f463199b7c2d3cddab7056b8a68a0b70.tar.bz2 samba-813bf8b4f463199b7c2d3cddab7056b8a68a0b70.zip | |
Fix a subtle logic bug in the adaption of se_create_child_secdesc(), pass RAW-ACL inheritance tests. Only access masks for SD get/set left to fix.
Jeremy.
Diffstat (limited to 'source3/lib/secdesc.c')
| -rw-r--r-- | source3/lib/secdesc.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/source3/lib/secdesc.c b/source3/lib/secdesc.c index de547d815f..df85336603 100644 --- a/source3/lib/secdesc.c +++ b/source3/lib/secdesc.c @@ -546,6 +546,9 @@ NTSTATUS se_create_child_secdesc(TALLOC_CTX *ctx, ptrustee = creator; new_flags |= SEC_ACE_FLAG_INHERIT_ONLY; + } else if (container && + !(ace->flags & SEC_ACE_FLAG_NO_PROPAGATE_INHERIT)) { + ptrustee = &ace->trustee; } init_sec_ace(new_ace, ptrustee, ace->type, |