[PATCH] Follow-up patch for bug in dealing with "Owner Rights" ACEs when calculating maximum access

David Disseldorp ddiss at samba.org
Thu Feb 28 23:38:55 UTC 2019


On Thu, 28 Feb 2019 15:12:56 -0800, Jeremy Allison via samba-technical wrote:

> +				uint32_t already_granted = (granted |
> +							owner_rights_allowed);
> +
> +				owner_rights_denied |= (ace->access_mask &
> +							~already_granted);

Wouldn't this now mean that an owner_rights_allowed ACE now takes
precedence over an owner_rights_denied ACE if the former comes first?
I'll need to take a closer look at the spec tomorrow for this.

Cheers, David



More information about the samba-technical mailing list