6729ff
From 82b1dafad17904bc224b0632486006fe88301b57 Mon Sep 17 00:00:00 2001
6729ff
From: Jeremy Allison <jra@samba.org>
6729ff
Date: Wed, 18 Dec 2013 13:56:18 -0800
6729ff
Subject: [PATCH] CVE-2013-6442: s3:smbcacls - ensure we don't lose an existing
6729ff
 ACL when setting owner or group owner.
6729ff
6729ff
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10327
6729ff
Bug 10327 - CVE-2013-6442: smbcacls --chown | --chgrp dacl regression
6729ff
6729ff
Signed-off-by: Jeremy Allison <jra@samba.org>
6729ff
Reviewed-by: Stefan Metzmacher <metze@samba.org>
6729ff
---
6729ff
 source3/utils/smbcacls.c | 2 +-
6729ff
 1 file changed, 1 insertion(+), 1 deletion(-)
6729ff
6729ff
diff --git a/source3/utils/smbcacls.c b/source3/utils/smbcacls.c
6729ff
index 11b7388..e3b7099 100644
6729ff
--- a/source3/utils/smbcacls.c
6729ff
+++ b/source3/utils/smbcacls.c
6729ff
@@ -990,7 +990,7 @@ static int owner_set(struct cli_state *cli, enum chown_mode change_mode,
6729ff
 		return EXIT_FAILED;
6729ff
 	}
6729ff
 
6729ff
-	sd = make_sec_desc(talloc_tos(),old->revision, old->type,
6729ff
+	sd = make_sec_desc(talloc_tos(),old->revision, SEC_DESC_SELF_RELATIVE,
6729ff
 				(change_mode == REQUEST_CHOWN) ? &sid : NULL,
6729ff
 				(change_mode == REQUEST_CHGRP) ? &sid : NULL,
6729ff
 			   NULL, NULL, &sd_size);
6729ff
-- 
6729ff
1.8.5.1
6729ff