[SCM] SAMBA-CTDB repository - branch v3-4-ctdb updated - 3.4.0-ctdb-2-6-g2ee1904
Michael Adam
obnox at samba.org
Wed Aug 19 03:56:31 MDT 2009
The branch, v3-4-ctdb has been updated
via 2ee19049594f20fbacf4c0db89be1d454f54c838 (commit)
from 6c9d35c50e86066a335ab083da420c239d330029 (commit)
http://gitweb.samba.org/?p=obnox/samba-ctdb.git;a=shortlog;h=v3-4-ctdb
- Log -----------------------------------------------------------------
commit 2ee19049594f20fbacf4c0db89be1d454f54c838
Author: Volker Lendecke <vl at samba.org>
Date: Thu Aug 13 06:33:16 2009 +0200
Make refusal of SEC_DESC_DACL_PROTECTED configurable
This adds a parameter "gpfs:refuse_dacl_protected" that defaults to false.
GPFS has no place to store the SEC_DESC_DACL_PROTECTED ACL bit. With this
parameter we give customers an option to either ignore this bit or refuse
setting an ACL with it.
-----------------------------------------------------------------------
Summary of changes:
source3/modules/vfs_gpfs.c | 4 +++-
1 files changed, 3 insertions(+), 1 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source3/modules/vfs_gpfs.c b/source3/modules/vfs_gpfs.c
index 3e13d45..a3088a9 100644
--- a/source3/modules/vfs_gpfs.c
+++ b/source3/modules/vfs_gpfs.c
@@ -445,7 +445,9 @@ static NTSTATUS gpfsacl_set_nt_acl_internal(files_struct *fsp, uint32 security_i
if (acl->acl_version&GPFS_ACL_VERSION_NFS4)
{
- if ((psd->type&SEC_DESC_DACL_PROTECTED)) {
+ if (lp_parm_bool(fsp->conn->params->service, "gpfs",
+ "refuse_dacl_protected", false)
+ && (psd->type&SEC_DESC_DACL_PROTECTED)) {
DEBUG(2, ("Rejecting unsupported ACL with DACL_PROTECTED bit set\n"));
return NT_STATUS_NOT_SUPPORTED;
}
--
SAMBA-CTDB repository
More information about the samba-cvs
mailing list