* security.cc (alloc_sd): Disable generating default permission entries

for directories.
This commit is contained in:
Corinna Vinschen 2009-02-04 15:26:22 +00:00
parent 0462e8847a
commit 29e22d07d6
2 changed files with 12 additions and 0 deletions

View File

@ -1,3 +1,8 @@
2009-02-04 Corinna Vinschen <corinna@vinschen.de>
* security.cc (alloc_sd): Disable generating default permission entries
for directories.
2009-01-29 Corinna Vinschen <corinna@vinschen.de>
* fhandler_disk_file.cc (fhandler_disk_file::readdir): Fix inode number

View File

@ -608,6 +608,12 @@ alloc_sd (path_conv &pc, __uid32_t uid, __gid32_t gid, int attribute,
acl_len += ace->Header.AceSize;
}
#if 0
/* CV 2009-02-04: Setting these inherit attributes for new dirs never was
really POSIX-like but rather a concession for native Win32 processes.
Disabled for now. Let's test if that has really a visible negative
impact. */
/* Construct appropriate inherit attribute for new directories */
if (S_ISDIR (attribute) && !acl_exists)
{
@ -647,6 +653,7 @@ alloc_sd (path_conv &pc, __uid32_t uid, __gid32_t gid, int attribute,
well_known_world_sid, acl_len, inherit))
return NULL;
}
#endif
/* Set AclSize to computed value. */
acl->AclSize = acl_len;