From 8edc8ed26ef23e047756ac5e1831c612406f37eb Mon Sep 17 00:00:00 2001 From: Gregor Beck Date: Wed, 31 Jul 2013 15:28:51 +0200 Subject: [PATCH 1/2] security.idl: add new security_secinfo bits [MS-DTYP].pdf 2.4.7 Signed-off-by: Gregor Beck --- librpc/idl/security.idl | 3 +++ 1 file changed, 3 insertions(+) diff --git a/librpc/idl/security.idl b/librpc/idl/security.idl index 00bb6e6..381d6e5 100644 --- a/librpc/idl/security.idl +++ b/librpc/idl/security.idl @@ -621,6 +621,9 @@ interface security SECINFO_DACL = 0x00000004, SECINFO_SACL = 0x00000008, SECINFO_LABEL = 0x00000010, + SECINFO_ATTRIBUTE = 0x00000020, + SECINFO_SCOPE = 0x00000040, + SECINFO_BACKUP = 0x00010000, SECINFO_UNPROTECTED_SACL = 0x10000000, SECINFO_UNPROTECTED_DACL = 0x20000000, SECINFO_PROTECTED_SACL = 0x40000000, -- 1.7.9.5 From 3342bf4cd8acdd5d151ddf3efe8afe6c270d5887 Mon Sep 17 00:00:00 2001 From: Gregor Beck Date: Wed, 31 Jul 2013 15:59:22 +0200 Subject: [PATCH 2/2] Fix bug 9678 - Windows 8 Roaming profiles fail Windows 8 tries to set 'ATTRIBUTE_SECURITY_INFORMATION' on some dirs. Ignoring it just like w2k3 make roaming profiles work again. Signed-off-by: Gregor Beck --- source3/smbd/nttrans.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/source3/smbd/nttrans.c b/source3/smbd/nttrans.c index 516b826..c6ba16f 100644 --- a/source3/smbd/nttrans.c +++ b/source3/smbd/nttrans.c @@ -891,6 +891,9 @@ NTSTATUS set_sd(files_struct *fsp, struct security_descriptor *psd, /* Ensure we have at least one thing set. */ if ((security_info_sent & (SECINFO_OWNER|SECINFO_GROUP|SECINFO_DACL|SECINFO_SACL)) == 0) { + if (security_info_sent == SECINFO_ATTRIBUTE) { + return NT_STATUS_OK; + } if (security_info_sent & SECINFO_LABEL) { /* Only consider SECINFO_LABEL if no other bits are set. Just like W2K3 we don't -- 1.7.9.5