From 9f6688dfc5be0242aa965fbb8fc29fd3f3f3e613 Mon Sep 17 00:00:00 2001 From: Corinna Vinschen Date: Fri, 27 Feb 2015 15:54:15 +0000 Subject: * security.cc (alloc_sd): For directories, mark inherited ACEs inheritable to better follow POSIX 1003.1e rules. --- winsup/cygwin/security.cc | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'winsup/cygwin/security.cc') diff --git a/winsup/cygwin/security.cc b/winsup/cygwin/security.cc index 6dde7d3c8..d8bab20dc 100644 --- a/winsup/cygwin/security.cc +++ b/winsup/cygwin/security.cc @@ -792,6 +792,12 @@ alloc_sd (path_conv &pc, uid_t uid, gid_t gid, int attribute, opening a file's security tab. Explorer complains if inheritable ACEs are preceding non-inheritable ACEs. */ ace->Header.AceFlags &= ~INHERITED_ACE; + /* However, if the newly created object is a directory, + it inherits the default ACL from its parent, so mark + all unrelated, inherited ACEs inheritable. */ + if (S_ISDIR (attribute)) + ace->Header.AceFlags |= CONTAINER_INHERIT_ACE + | OBJECT_INHERIT_ACE; } else if (uid == ILLEGAL_UID && gid == ILLEGAL_UID && ace->Header.AceType == ACCESS_ALLOWED_ACE_TYPE -- cgit v1.2.3