SMB3 POSIX and deleting files with FILE_ATTRIBUTE_READONLY

[Steve French]

On Thu, Apr 10, 2025 at 3:32 AM Ralph Boehme <slow at samba.org> wrote:
>
> On 4/10/25 7:23 AM, Tom Talpey wrote:
> > On 4/9/2025 9:06 PM, Ralph Boehme wrote:
> >> On 4/9/25 8:43 PM, Steve French wrote:
> >>> On Wed, Apr 9, 2025 at 1:18 PM Ralph Boehme <slow at samba.org> wrote:
> >>>> what should be the behavior with SMB3 POSIX when a POSIX client
> >>>> tries to
> >>>> delete a file that has FILE_ATTRIBUTE_READONLY set?
> >>>>
> >>>> The major question that we must answer is, if this we would want to
> >>>> allow for POSIX clients to ignore this in some way: either completely
> >>>> ignore it on POSIX handles or first check if the handle has requested
> >>>> and been granted WRITE_ATTRIBUTES access.
> >>>
> >>> I agree that to delete a file with READ_ONLY set should by default
> >>> require
> >>> WRITE_ATTRIBUTES (and delete)
> >
> > Since when does Posix require this??
>
> Obviously it doesn't.
>
> Let me try to ask it differently: do we want to relax Windows security
> model on a POSIX handle for this operation, even if we can build sane
> semantics into the protocol that doesn't require this?

If in doubt, better to be "more secure" unless case is very strong to relax
this check.

-- 
Thanks,

Steve