diff options
| author | Jeremy Allison <jra@samba.org> | 2010-01-08 10:17:46 -0800 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2010-01-08 10:17:46 -0800 |
| commit | d7713d11a6dc2d66c820d7496bc45eb5fe527fbf (patch) | |
| tree | 0720ac7ab70626eddb887d273477eecbdc9a5063 /source4/setup/fedorads-dna.ldif | |
| parent | fca0c4de2ab8890af4d5f15009a2777691f222bd (diff) | |
| download | samba-d7713d11a6dc2d66c820d7496bc45eb5fe527fbf.tar.gz samba-d7713d11a6dc2d66c820d7496bc45eb5fe527fbf.tar.bz2 samba-d7713d11a6dc2d66c820d7496bc45eb5fe527fbf.zip | |
Re-fix bug 5202 - cannot change ACLs on writable file with "dos filemode=yes"
This bug re-occurred for 3.3.x and above.
The reason is that to change a NT ACL we now have to open the file requesting
WRITE_DAC and WRITE_OWNER access. The mapping from POSIX "w" to NT permissions
in posix_acls doesn't add these bits when "dos filemode = yes", so even though
the permission or owner change would be allowed by the POSIX ACL code, the
NTCreateX call fails with ACCESS_DENIED now we always check NT permissions
first.
Added in the mapping from "w" to WRITE_DAC and WRITE_OWNER access.
Jeremy.
Diffstat (limited to 'source4/setup/fedorads-dna.ldif')
0 files changed, 0 insertions, 0 deletions