From 87db2331fc855473d8b3cad1c4149807823aa3c4 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Mon, 11 Feb 2013 14:45:57 +1100 Subject: dsdb-descriptor: Spell out security descriptor flags as constants Reviewed-by: Stefan Metzmacher --- source4/dsdb/samdb/ldb_modules/acl_util.c | 2 +- source4/dsdb/samdb/ldb_modules/descriptor.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/source4/dsdb/samdb/ldb_modules/acl_util.c b/source4/dsdb/samdb/ldb_modules/acl_util.c index 9be376d556..1f64ab1865 100644 --- a/source4/dsdb/samdb/ldb_modules/acl_util.c +++ b/source4/dsdb/samdb/ldb_modules/acl_util.c @@ -272,7 +272,7 @@ uint32_t dsdb_request_sd_flags(struct ldb_request *req, bool *explicit) * equals all 4 bits */ if (sd_flags == 0) { - sd_flags = 0xF; + sd_flags = SECINFO_OWNER | SECINFO_GROUP | SECINFO_DACL | SECINFO_SACL; } return sd_flags; diff --git a/source4/dsdb/samdb/ldb_modules/descriptor.c b/source4/dsdb/samdb/ldb_modules/descriptor.c index d9bc89fe62..859558ca1e 100644 --- a/source4/dsdb/samdb/ldb_modules/descriptor.c +++ b/source4/dsdb/samdb/ldb_modules/descriptor.c @@ -643,7 +643,7 @@ static int descriptor_add(struct ldb_module *module, struct ldb_request *req) * The SD_FLAG control is ignored on add * and we default to all bits set. */ - sd_flags = 0xF; + sd_flags = SECINFO_OWNER|SECINFO_GROUP|SECINFO_SACL|SECINFO_DACL; sd = get_new_descriptor(module, dn, req, objectclass, parent_sd, -- cgit