From ec427f17adc7d07f8d046962fbc05c3bd042bf56 Mon Sep 17 00:00:00 2001 From: Richard Sharpe Date: Wed, 27 Mar 2013 19:36:43 -0700 Subject: [PATCH] Make sure that we only propogate the INHERITED flag when we are allowed to. Signed-off-by: Jeremy Allison Reviewed-by: Richard Sharpe --- libcli/security/secdesc.c | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/libcli/security/secdesc.c b/libcli/security/secdesc.c index d2c5833..10d068c 100644 --- a/libcli/security/secdesc.c +++ b/libcli/security/secdesc.c @@ -614,7 +614,8 @@ NTSTATUS se_create_child_secdesc(TALLOC_CTX *ctx, if (!container) { new_flags = 0; } else { - new_flags &= ~SEC_ACE_FLAG_INHERIT_ONLY; + new_flags &= ~(SEC_ACE_FLAG_INHERIT_ONLY + | SEC_ACE_FLAG_INHERITED_ACE); if (!(new_flags & SEC_ACE_FLAG_CONTAINER_INHERIT)) { new_flags |= SEC_ACE_FLAG_INHERIT_ONLY; -- 1.7.4.4