Dealing with Object ACES

Richard Sharpe realrichardsharpe at gmail.com
Sun Apr 21 01:02:04 MDT 2013


Hi folks,

It seems that some software package out there insists on adding
Inheritable Object ACEs to directories.

Samba does not handle them well at all.

I was looking at adding tests, but even
security_descriptor_dacl_create does not handle them.

They are described in section 2.4.4.3 of [MS-DTYP].pdf.

I think I will add an extra argument and have
security_descriptor_appendv deal with the extra parameter if an Object
ACE was specified.

-- 
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)


More information about the samba-technical mailing list