Dealing with Object ACES

Richard Sharpe realrichardsharpe at
Sun Apr 21 01:02:04 MDT 2013

Hi folks,

It seems that some software package out there insists on adding
Inheritable Object ACEs to directories.

Samba does not handle them well at all.

I was looking at adding tests, but even
security_descriptor_dacl_create does not handle them.

They are described in section of [MS-DTYP].pdf.

I think I will add an extra argument and have
security_descriptor_appendv deal with the extra parameter if an Object
ACE was specified.

Richard Sharpe

More information about the samba-technical mailing list