Allowed DACLs to to not have any ACE
Windows server 2012 apparently uses files with no ACEs in their DACL, thus denying any access to any process except system backup. Such DACLs should however be considered valid.edge.strict_endians
parent
e9a2d29b33
commit
91a44b438c
|
@ -639,7 +639,7 @@ BOOL ntfs_valid_descr(const char *securattr, unsigned int attrsz)
|
|||
&& ((offgroup + 2) < attrsz)
|
||||
&& (!offdacl
|
||||
|| ((offdacl >= sizeof(SECURITY_DESCRIPTOR_RELATIVE))
|
||||
&& (offdacl+sizeof(ACL) < attrsz)))
|
||||
&& (offdacl+sizeof(ACL) <= attrsz)))
|
||||
&& (!offsacl
|
||||
|| ((offsacl >= sizeof(SECURITY_DESCRIPTOR_RELATIVE))
|
||||
&& (offsacl+sizeof(ACL) <= attrsz)))
|
||||
|
|
Loading…
Reference in New Issue