diff options
| -rw-r--r-- | source4/dsdb/samdb/ldb_modules/acl_util.c | 2 | ||||
| -rw-r--r-- | source4/dsdb/samdb/ldb_modules/descriptor.c | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/source4/dsdb/samdb/ldb_modules/acl_util.c b/source4/dsdb/samdb/ldb_modules/acl_util.c index 9be376d556..1f64ab1865 100644 --- a/source4/dsdb/samdb/ldb_modules/acl_util.c +++ b/source4/dsdb/samdb/ldb_modules/acl_util.c @@ -272,7 +272,7 @@ uint32_t dsdb_request_sd_flags(struct ldb_request *req, bool *explicit) * equals all 4 bits */ if (sd_flags == 0) { - sd_flags = 0xF; + sd_flags = SECINFO_OWNER | SECINFO_GROUP | SECINFO_DACL | SECINFO_SACL; } return sd_flags; diff --git a/source4/dsdb/samdb/ldb_modules/descriptor.c b/source4/dsdb/samdb/ldb_modules/descriptor.c index d9bc89fe62..859558ca1e 100644 --- a/source4/dsdb/samdb/ldb_modules/descriptor.c +++ b/source4/dsdb/samdb/ldb_modules/descriptor.c @@ -643,7 +643,7 @@ static int descriptor_add(struct ldb_module *module, struct ldb_request *req) * The SD_FLAG control is ignored on add * and we default to all bits set. */ - sd_flags = 0xF; + sd_flags = SECINFO_OWNER|SECINFO_GROUP|SECINFO_SACL|SECINFO_DACL; sd = get_new_descriptor(module, dn, req, objectclass, parent_sd, |