vfs_zfsacl: fix issue with ACL inheritance in zfsacl
authorawalker <awalker@ixsystems.com>
Fri, 30 Aug 2019 19:30:57 +0000 (15:30 -0400)
committerJeremy Allison <jra@samba.org>
Fri, 20 Dec 2019 23:24:54 +0000 (23:24 +0000)
commit30f9e1dd596a0dc4894f17b07a7e2e58dcb75c16
treea3800c2784bb036498d2ebf751895fad92e9afeb
parent063fadd322e54ee12689485457ce15a1bb8c0769
vfs_zfsacl: fix issue with ACL inheritance in zfsacl

Add parameter zfsacl:map_dacl_protected to address issue preventing Windows Clients
from disabling inheritance on ACLs. FreeBSD does not currently expose the ACL_PROTECTED
NFS4.1 flag, but it does expose ACE4_INHERITED_ACE. When the parameter is enabled,
map the absence of ACE4_INHERITED_ACE to SEC_DESC_DACL_PROTECTED.

See also the discussion at

https://gitlab.com/samba-team/samba/merge_requests/719

Signed-off-by: Andrew Walker <awalker@ixsystems.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Fri Dec 20 23:24:54 UTC 2019 on sn-devel-184
docs-xml/manpages/vfs_zfsacl.8.xml
source3/modules/vfs_zfsacl.c