[PATCH] Bug in dealing with "Owner Rights" ACEs when calculating maximum access

[Jeremy Allison]

On Thu, Feb 28, 2019 at 11:04:54PM +0100, David Disseldorp wrote:
> > 
> > Is there a MS-DTYP reference for this that I'm missing ?
> 
> Hmm, yeah I think you're right, considering owner_rights_allowed in the
> TYPE_ACCESS_DENIED path looks wrong here. I'd guess it's a cut'n'paste
> error from se_access_check()->bits_remaining. You can have a RB+ from
> me for your follow up fix, but let's wait for Ralph's response :)

It's more complex than that - I've been doing lots of Windows
testing :-).

Additional patchset incoming that should get us to match
Windows (bizarre:-) behaviour here, once I've got us passing
my new tests..