| commit | 1a9fd08eeb564aa48e386b65fac6585d2e54e947 | |
| author | Uri Simchoni <uri@samba.org> | |
| Mon, 21 Mar 2016 21:04:24 +0000 (21 23:04 +0200) | ||
| committer | Karolin Seeger <kseeger@samba.org> | |
| Mon, 18 Apr 2016 10:58:29 +0000 (18 12:58 +0200) | ||
| tree | ae1af58462098d8869cdfb04b1b20e18025371f6 | treesnapshot (tar.gz zip) |
| parent | a74212b4f10d8d2d0f1a35a04eeeab376d4cb1b8 | commitdiff |
vfs_acl_common: avoid setting POSIX ACLs if "ignore system acls" is set
When "ignore system acls" is set, do not mess at all with POSIX ACLS,
do not even calculate the would-be POSIX-ACL-based security descriptor
(for performance reasons).
Instead, just store a V3 blob with zero hash. This means that if we
later read the ACL without ignoring system ACLs, the NT ACL shall be
reset to the info derivable from the POSIX ACL.
File ownership is still modified as it has bearing on disk quotas.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11806
Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit 765e5f1f2670d3d5d8d62a04b4ccf38a680bcb37)
When "ignore system acls" is set, do not mess at all with POSIX ACLS,
do not even calculate the would-be POSIX-ACL-based security descriptor
(for performance reasons).
Instead, just store a V3 blob with zero hash. This means that if we
later read the ACL without ignoring system ACLs, the NT ACL shall be
reset to the info derivable from the POSIX ACL.
File ownership is still modified as it has bearing on disk quotas.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11806
Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit 765e5f1f2670d3d5d8d62a04b4ccf38a680bcb37)
| source3/modules/vfs_acl_common.c | diffblobblamehistory |