ACCESS_DENIED ACL to POSIX Perms conversion.
jra at samba.org
Tue Feb 10 16:20:11 MST 2015
On Tue, Feb 10, 2015 at 06:01:44PM -0500, John Mulligan wrote:
> I didn't read the whole patch but at least part of what Kenny is describing
> seems to overlap with this bug I filed a while back:
> I worked around our issue for the time being, but the last time I looked Samba
> 4.1 was unable to generate the 3-element perms in any test case I tried.
> When I took a stab at it the "adding additional ACEs to the ACL" was surely
> involved in the problem. Somehow the conversion code gets to a point where
> there were too many aces, and for a lack of a better word, gives up.
> Unfortunately it was not a high priority for me and I didn't keep on debugging
Ah, I remember that bug - thanks for jogging my memory.
Unfortunately making Samba work on top of filesystems
with no ACLs is somewhat of a low priority - I'm not
sure we can do it to fail safely in any case.
I think the approach I suggested in the other email
would work, although for security reasons I don't
think we can use that upstream.
More information about the samba-technical