[PATCH] Fix missing permission check on destination directory on rename.
jra at samba.org
Wed Dec 7 19:21:06 UTC 2016
On Wed, Dec 07, 2016 at 08:18:24AM +0100, Volker Lendecke wrote:
> On Tue, Dec 06, 2016 at 09:51:05AM -0800, Jeremy Allison wrote:
> > Bit of a corner case, took me a while to code
> > up a good regression test case, but fixes an
> > issue if there is a missmatch between the
> > underlying file system permissions and the
> > stored NT ACLs.
> Just for my understanding -- wasn't the idea that Posix always rules?
> If someone changes the file system acl, our getacl code will override
> the nt acl, due to a checksum mismatch?
Yes it does - that's why I had to do the test on a
share set with 'ignore system acls' set - it took
me a while to get a test that the original code
actually fails because of this :-).
> The code of course looks good, the test case is an interesting sample :-)
More information about the samba-technical