Is it correct to have an INHERIT_ONLY, CI, OI ace with GENERIC_ALL as the only perm set?

Jeremy Allison jra at samba.org
Mon Sep 16 00:28:39 UTC 2019


On Sun, Sep 15, 2019 at 05:19:40PM -0700, Richard Sharpe via samba-technical wrote:
> On Sun, Sep 15, 2019 at 5:15 PM Jeremy Allison <jra at samba.org> wrote:
> >
> > On Sun, Sep 15, 2019 at 05:04:17PM -0700, Richard Sharpe via samba-technical wrote:
> > > Hi folks,
> > >
> > > I have a capture from a GET INFO SEC INFO from a NetApp C-Mode
> > > simulator where one of the two ACEs on a dir is an IO, CI, OI ACE with
> > > GENERIC_ALL as its only permission bit set.
> > >
> > > Is this legal?
> > >
> > > If so, I guess it maps to 0x1f01ff
> >
> > Isn't that the equivalent of a POSIX directory
> > inheritance ACE of wrx ?
> 
> Well, it seems that Windows does allow it, if this is to be believed:
> 
> https://stackoverflow.com/questions/25163174/get-generic-folder-permissions-like-generic-all-using-javas-aclfileattributev

Ah, I misunderstood you initially. Yeah, a GENERIC_ALL
should have been mapped to the file-specific bits on set
I would have thought.



More information about the samba-technical mailing list