s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory...

Remove knownfail.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14708

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Noel Power <npower@samba.org>
Autobuild-User(master): Noel Power <npower@samba.org>
Autobuild-Date(master): Wed May 19 09:22:56 UTC 2021 on sn-devel-184

(cherry picked from commit b7f62e13933da14c381f70cd46ad13849b108e68)

Autobuild-User(v4-13-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-13-test): Fri May 21 08:50:20 UTC 2021 on sn-devel-184

diff --git a/source3/smbd/posix_acls.c b/source3/smbd/posix_acls.c
index db2d36a89a1e7f18dfdf9b3c3f0b0c7165d3bd37..1e39261828b2553e70212b8f35be0d9316db9113 100644 (file)
--- a/source3/smbd/posix_acls.c
+++ b/source3/smbd/posix_acls.c
@@ -3475,6 +3475,7 @@ NTSTATUS posix_fget_nt_acl(struct files_struct *fsp, uint32_t security_info,
 {
        SMB_STRUCT_STAT sbuf;
        SMB_ACL_T posix_acl = NULL;
+       SMB_ACL_T def_acl = NULL;
        struct pai_val *pal;
        TALLOC_CTX *frame = talloc_stackframe();
        NTSTATUS status;
@@ -3493,10 +3494,19 @@ NTSTATUS posix_fget_nt_acl(struct files_struct *fsp, uint32_t security_info,
        /* Get the ACL from the fd. */
        posix_acl = SMB_VFS_SYS_ACL_GET_FD(fsp, frame);
 
+       /* If it's a directory get the default POSIX ACL. */
+       if(fsp->fsp_flags.is_directory) {
+               def_acl = SMB_VFS_SYS_ACL_GET_FILE(fsp->conn,
+                                                  fsp->fsp_name,
+                                                  SMB_ACL_TYPE_DEFAULT,
+                                                  frame);
+               def_acl = free_empty_sys_acl(fsp->conn, def_acl);
+       }
+
        pal = fload_inherited_info(fsp);
 
        status = posix_get_nt_acl_common(fsp->conn, fsp->fsp_name->base_name,
-                                        &sbuf, pal, posix_acl, NULL,
+                                        &sbuf, pal, posix_acl, def_acl,
                                         security_info, mem_ctx, ppdesc);
        TALLOC_FREE(frame);
        return status;