common/acl/acl_common.c

34 #include <acl/acl_common.h>
1274 	ace_list_t *normacl = NULL, *dfacl = NULL, *acl;
1330 		/* see if this should be a regular or default acl */
1343 			acl = dfacl;
1345 			acl = normacl;
1349 			if (acl->state > ace_user_obj) {
1353 			acl->state = ace_user_obj;
1354 			acl->seen |= USER_OBJ;
1355 			vals = &acl->user_obj;
1356 			vals->aent_type = USER_OBJ | acl->dfacl_flag;
1358 			acl->state = ace_other_obj;
1359 			acl->seen |= OTHER_OBJ;
1360 			vals = &acl->other_obj;
1361 			vals->aent_type = OTHER_OBJ | acl->dfacl_flag;
1363 			if (acl->state > ace_group) {
1368 				acl->seen |= GROUP_OBJ;
1369 				vals = &acl->group_obj;
1370 				vals->aent_type = GROUP_OBJ | acl->dfacl_flag;
1372 				acl->seen |= GROUP;
1373 				vals = acevals_find(acep, &acl->group,
1374 				    &acl->numgroups);
1379 				vals->aent_type = GROUP | acl->dfacl_flag;
1381 			acl->state = ace_group;
1383 			if (acl->state > ace_user) {
1387 			acl->state = ace_user;
1388 			acl->seen |= USER;
1389 			vals = acevals_find(acep, &acl->user,
1390 			    &acl->numusers);
1395 			vals->aent_type = USER | acl->dfacl_flag;
1398 		if (!(acl->state > ace_unused)) {
1417 				if ((acl->state != ace_user) &&
1418 				    (acl->state != ace_group)) {
1423 				if (! acl->hasmask) {
1424 					acl->hasmask = 1;
1425 					acl->acl_mask = vals->denied;
1427 				} else if (acl->acl_mask != vals->denied) {
1544 	 * replace old acl with newly translated acl
1569 #define	SET_ACE(acl, index, who, mask, type, flags) { \
1570 	acl[0][index].a_who = (uint32_t)who; \
1571 	acl[0][index].a_type = type; \
1572 	acl[0][index].a_flags = flags; \
1573 	acl[0][index++].a_access_mask = mask; \
1639 acl_trivial_create(mode_t mode, boolean_t isdir, ace_t **acl, int *count)
1655 	if ((error = cacl_malloc((void **)acl, *count * sizeof (ace_t))) != 0)
1659 		SET_ACE(acl, index, -1, masks.allow0,
1663 		SET_ACE(acl, index, -1, masks.deny1,
1667 		SET_ACE(acl, index, -1, masks.deny2,
1671 	SET_ACE(acl, index, -1, masks.owner, ACE_ACCESS_ALLOWED_ACE_TYPE,
1673 	SET_ACE(acl, index, -1, masks.group, ACE_ACCESS_ALLOWED_ACE_TYPE,
1675 	SET_ACE(acl, index, -1, masks.everyone, ACE_ACCESS_ALLOWED_ACE_TYPE,
1683  * determine whether an ace_t acl is trivial
1685  * Trivialness implies that the acl is composed of only