From 7fd926fcdcb92a8e1e2b0c29371f2eb2ae4057df Mon Sep 17 00:00:00 2001 From: Richard Sharpe Date: Wed, 27 Mar 2013 19:36:43 -0700 Subject: Make sure that we only propogate the INHERITED flag when we are allowed to. Signed-off-by: Jeremy Allison Reviewed-by: Richard Sharpe Autobuild-User(master): Jeremy Allison Autobuild-Date(master): Thu Mar 28 19:43:41 CET 2013 on sn-devel-104 --- libcli/security/secdesc.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'libcli') diff --git a/libcli/security/secdesc.c b/libcli/security/secdesc.c index d2c5833492..a7e99005eb 100644 --- a/libcli/security/secdesc.c +++ b/libcli/security/secdesc.c @@ -614,7 +614,8 @@ NTSTATUS se_create_child_secdesc(TALLOC_CTX *ctx, if (!container) { new_flags = 0; } else { - new_flags &= ~SEC_ACE_FLAG_INHERIT_ONLY; + new_flags &= ~(SEC_ACE_FLAG_INHERIT_ONLY + | SEC_ACE_FLAG_INHERITED_ACE); if (!(new_flags & SEC_ACE_FLAG_CONTAINER_INHERIT)) { new_flags |= SEC_ACE_FLAG_INHERIT_ONLY; -- cgit