The branch, master has been updated via c54a8db00621de12efc6424cd9112aaf95935067 (commit) from 5feff0ba01a02f7b9d0c76e3c313d9cb361eb35e (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log ----------------------------------------------------------------- commit c54a8db00621de12efc6424cd9112aaf95935067 Author: Volker Lendecke <v...@samba.org> Date: Thu Aug 13 06:33:16 2009 +0200 Make refusal of SEC_DESC_DACL_PROTECTED configurable This adds a parameter "gpfs:refuse_dacl_protected" that defaults to false. GPFS has no place to store the SEC_DESC_DACL_PROTECTED ACL bit. With this parameter we give customers an option to either ignore this bit or refuse setting an ACL with it. ----------------------------------------------------------------------- Summary of changes: source3/modules/vfs_gpfs.c | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/modules/vfs_gpfs.c b/source3/modules/vfs_gpfs.c index 25eaa4b..3660bb2 100644 --- a/source3/modules/vfs_gpfs.c +++ b/source3/modules/vfs_gpfs.c @@ -446,7 +446,9 @@ static NTSTATUS gpfsacl_set_nt_acl_internal(files_struct *fsp, uint32 security_i if (acl->acl_version&GPFS_ACL_VERSION_NFS4) { - if ((psd->type&SEC_DESC_DACL_PROTECTED)) { + if (lp_parm_bool(fsp->conn->params->service, "gpfs", + "refuse_dacl_protected", false) + && (psd->type&SEC_DESC_DACL_PROTECTED)) { DEBUG(2, ("Rejecting unsupported ACL with DACL_PROTECTED bit set\n")); return NT_STATUS_NOT_SUPPORTED; } -- Samba Shared Repository