git.samba.org
/
sfrench
/
samba-autobuild
/
.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
| inline |
side by side
libcli/security: fix handling of deny type ACEs in access_check_max_allowed()
[sfrench/samba-autobuild/.git]
/
libcli
/
security
/
access_check.c
diff --git
a/libcli/security/access_check.c
b/libcli/security/access_check.c
index d1d57eecef2355e799bae7023691ccc7f80f0ad6..322f4fdb0c64d572d76b667c632e9421428e797b 100644
(file)
--- a/
libcli/security/access_check.c
+++ b/
libcli/security/access_check.c
@@
-173,7
+173,7
@@
static uint32_t access_check_max_allowed(const struct security_descriptor *sd,
break;
case SEC_ACE_TYPE_ACCESS_DENIED:
case SEC_ACE_TYPE_ACCESS_DENIED_OBJECT:
- denied |= ace->access_mask;
+ denied |=
~granted &
ace->access_mask;
break;
default: /* Other ACE types not handled/supported */
break;