summaryrefslogtreecommitdiff
path: root/source3
diff options
context:
space:
mode:
authorVolker Lendecke <vl@samba.org>2009-08-13 06:33:16 +0200
committerMichael Adam <obnox@samba.org>2009-08-19 11:39:44 +0200
commitc54a8db00621de12efc6424cd9112aaf95935067 (patch)
tree3fffb210c52e66bac1ba349ecf43e964758efe57 /source3
parent5feff0ba01a02f7b9d0c76e3c313d9cb361eb35e (diff)
downloadsamba-c54a8db00621de12efc6424cd9112aaf95935067.tar.gz
samba-c54a8db00621de12efc6424cd9112aaf95935067.tar.bz2
samba-c54a8db00621de12efc6424cd9112aaf95935067.zip
Make refusal of SEC_DESC_DACL_PROTECTED configurable
This adds a parameter "gpfs:refuse_dacl_protected" that defaults to false. GPFS has no place to store the SEC_DESC_DACL_PROTECTED ACL bit. With this parameter we give customers an option to either ignore this bit or refuse setting an ACL with it.
Diffstat (limited to 'source3')
-rw-r--r--source3/modules/vfs_gpfs.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/source3/modules/vfs_gpfs.c b/source3/modules/vfs_gpfs.c
index 25eaa4b62f..3660bb2d3a 100644
--- a/source3/modules/vfs_gpfs.c
+++ b/source3/modules/vfs_gpfs.c
@@ -446,7 +446,9 @@ static NTSTATUS gpfsacl_set_nt_acl_internal(files_struct *fsp, uint32 security_i
if (acl->acl_version&GPFS_ACL_VERSION_NFS4)
{
- if ((psd->type&SEC_DESC_DACL_PROTECTED)) {
+ if (lp_parm_bool(fsp->conn->params->service, "gpfs",
+ "refuse_dacl_protected", false)
+ && (psd->type&SEC_DESC_DACL_PROTECTED)) {
DEBUG(2, ("Rejecting unsupported ACL with DACL_PROTECTED bit set\n"));
return NT_STATUS_NOT_SUPPORTED;
}