dsa

[David Collier-Brown]

Volker Lendecke wrote:
> So the only solution to gd's problem is to set the security descriptors in a
> sequence that goes from the low-level files up to the top-level ones, doing the
> share secdesc last, ensuring that the newly created files and directories are
> accessible until the secdesc is set. Hmm. Sounds nasty :-(
	
	And it makes samba the pretty-ordinary-unix-program
	into samba-the-priveleged-security-risk-sysadmin tool.

--dave