From 037c95990a1e26fbb90fe1aef44ef6bef9df0d87 Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Thu, 28 Mar 2013 09:36:41 -0700 Subject: [PATCH] Make sure that we only propogate the INHERITED flag when we are allowed to. Signed-off-by: Jeremy Allison --- source3/lib/secdesc.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/source3/lib/secdesc.c b/source3/lib/secdesc.c index b7c9fc5..7ff3a6a 100644 --- a/source3/lib/secdesc.c +++ b/source3/lib/secdesc.c @@ -602,7 +602,8 @@ NTSTATUS se_create_child_secdesc(TALLOC_CTX *ctx, if (!container) { new_flags = 0; } else { - new_flags &= ~SEC_ACE_FLAG_INHERIT_ONLY; + new_flags &= ~(SEC_ACE_FLAG_INHERIT_ONLY| + SEC_ACE_FLAG_INHERITED_ACE); if (!(new_flags & SEC_ACE_FLAG_CONTAINER_INHERIT)) { new_flags |= SEC_ACE_FLAG_INHERIT_ONLY; -- 1.8.1.3