Uploaded image for project: 'TrueNAS'
  1. TrueNAS
  2. NAS-109277

s3:modules:zfsacl/ixnas - fix SD control flags

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Done (View Workflow)
    • Priority: Low
    • Resolution: Complete
    • Affects Version/s: None
    • Fix Version/s: 12.0-U3
    • Component/s: Middleware
    • Labels:
      None

      Description

      PR: https://github.com/freenas/ports/pull/950

      Investigation of control flags set in Windows security descriptors
      in various circumstances indicates that SEC_DESC_DACL_AUTO_INHERITED
      is set on directories even when auto-inheritance is disabled
      (has PAI in SDDL output). Internally in samba this flag is expected
      to be present in se_create_child_secdesc() otherwise ACE_INHERITED_ACE
      will be stripped from the resulting child security descriptor. Primary
      caller of this is inherit_new_acl() in source3/smbd/open.c, but there
      is no guarantee that this won't be used in other places in Samba and so
      it's important that the generic secdesc function return something
      sensible. Impact on Windows clients is unknown, but no issues have been
      observed in the wild.

        Attachments

          Attachments

            JEditor

              Activity

                People

                Assignee:
                awalker Andrew Walker
                Reporter:
                bugclerk Bug Clerk
                Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved: