Is it correct to have an INHERIT_ONLY, CI, OI ace with GENERIC_ALL as the only perm set?

Richard Sharpe realrichardsharpe at gmail.com
Mon Sep 16 00:19:40 UTC 2019


On Sun, Sep 15, 2019 at 5:15 PM Jeremy Allison <jra at samba.org> wrote:
>
> On Sun, Sep 15, 2019 at 05:04:17PM -0700, Richard Sharpe via samba-technical wrote:
> > Hi folks,
> >
> > I have a capture from a GET INFO SEC INFO from a NetApp C-Mode
> > simulator where one of the two ACEs on a dir is an IO, CI, OI ACE with
> > GENERIC_ALL as its only permission bit set.
> >
> > Is this legal?
> >
> > If so, I guess it maps to 0x1f01ff
>
> Isn't that the equivalent of a POSIX directory
> inheritance ACE of wrx ?

Well, it seems that Windows does allow it, if this is to be believed:

https://stackoverflow.com/questions/25163174/get-generic-folder-permissions-like-generic-all-using-javas-aclfileattributev

-- 
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)(传说杜康是酒的发明者)



More information about the samba-technical mailing list