vfs: Implement an improved vfs_acl_common that uses the hash of the system ACL
commit25526ed3f590e4fa90c237a37f08bb23f449dd8c
authorAndrew Bartlett <abartlet@samba.org>
Wed, 10 Oct 2012 05:36:47 +0000 (10 16:36 +1100)
committerAndrew Bartlett <abartlet@samba.org>
Mon, 4 Feb 2013 11:19:30 +0000 (4 12:19 +0100)
tree2173740139e6023950bb0acf293a94979b15f491
parent6a5f65b0e971f068ebae5b2f93a6dfccfaa93b26
vfs: Implement an improved vfs_acl_common that uses the hash of the system ACL

Where supported by the system ACL backend, this avoids hashing the
result of the ACL mapping, instead hashing the original ACL,
linearlised.

For maximum robustness, the hash of the NT and system ACL are stored,
along with the time and a description of the system ACL.  This variety
of extra metadata may assist some future implementation in determining
which hash to validate.

Andrew Bartlett

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Christian Ambach <ambi@samba.org>
source3/modules/vfs_acl_common.c