diff options
| author | Volker Lendecke <vl@samba.org> | 2009-08-13 06:33:16 +0200 |
|---|---|---|
| committer | Michael Adam <obnox@samba.org> | 2009-08-19 11:39:44 +0200 |
| commit | c54a8db00621de12efc6424cd9112aaf95935067 (patch) | |
| tree | 3fffb210c52e66bac1ba349ecf43e964758efe57 /source3/modules | |
| parent | 5feff0ba01a02f7b9d0c76e3c313d9cb361eb35e (diff) | |
| download | samba-c54a8db00621de12efc6424cd9112aaf95935067.tar.gz samba-c54a8db00621de12efc6424cd9112aaf95935067.tar.bz2 samba-c54a8db00621de12efc6424cd9112aaf95935067.zip | |
Make refusal of SEC_DESC_DACL_PROTECTED configurable
This adds a parameter "gpfs:refuse_dacl_protected" that defaults to false.
GPFS has no place to store the SEC_DESC_DACL_PROTECTED ACL bit. With this
parameter we give customers an option to either ignore this bit or refuse
setting an ACL with it.
Diffstat (limited to 'source3/modules')
| -rw-r--r-- | source3/modules/vfs_gpfs.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/source3/modules/vfs_gpfs.c b/source3/modules/vfs_gpfs.c index 25eaa4b62f..3660bb2d3a 100644 --- a/source3/modules/vfs_gpfs.c +++ b/source3/modules/vfs_gpfs.c @@ -446,7 +446,9 @@ static NTSTATUS gpfsacl_set_nt_acl_internal(files_struct *fsp, uint32 security_i if (acl->acl_version&GPFS_ACL_VERSION_NFS4) { - if ((psd->type&SEC_DESC_DACL_PROTECTED)) { + if (lp_parm_bool(fsp->conn->params->service, "gpfs", + "refuse_dacl_protected", false) + && (psd->type&SEC_DESC_DACL_PROTECTED)) { DEBUG(2, ("Rejecting unsupported ACL with DACL_PROTECTED bit set\n")); return NT_STATUS_NOT_SUPPORTED; } |