From: Wilco Baan Hofman <wilco@baanhofman.nl>
Date: Wed, 19 May 2010 16:58:54 +0000 (+0200)
Subject: Fix set GPT security descriptor to match windows' behaviour.
X-Git-Tag: samba-3.6.0pre1~859
X-Git-Url: http://git.samba.org/?p=samba.git;a=commitdiff_plain;h=5434171296e33ffe493995589ae41b123a12d9aa

Fix set GPT security descriptor to match windows' behaviour.

Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
---

diff --git a/source4/lib/policy/gp_filesys.c b/source4/lib/policy/gp_filesys.c
index f44ab0dd542..f6183bd8e1d 100644
--- a/source4/lib/policy/gp_filesys.c
+++ b/source4/lib/policy/gp_filesys.c
@@ -452,7 +452,7 @@ NTSTATUS gp_set_gpt_security_descriptor(struct gp_context *gp_ctx, struct gp_obj
 	/* Set the security descriptor on the directory */
 	fileinfo.generic.level = RAW_FILEINFO_SEC_DESC;
 	fileinfo.set_secdesc.in.file.fnum = io.ntcreatex.out.file.fnum;
-	fileinfo.set_secdesc.in.secinfo_flags = SECINFO_OWNER | SECINFO_GROUP | SECINFO_SACL | SECINFO_DACL;
+	fileinfo.set_secdesc.in.secinfo_flags = SECINFO_PROTECTED_DACL | SECINFO_OWNER | SECINFO_GROUP | SECINFO_DACL;
 	fileinfo.set_secdesc.in.sd = sd;
 	status = smb_raw_setfileinfo(gp_ctx->cli->tree, &fileinfo);
 	if (!NT_STATUS_IS_OK(status)) {