common/acl/acl_common.c

515 	ace_t *acep, *result = NULL;
543 	acep = result;
556 			acep->a_type = ACE_ACCESS_DENIED_ACE_TYPE;
557 			acep->a_flags = 0;
559 				acep->a_who = (uid_t)-1;
560 				acep->a_flags |=
563 				acep->a_who = aclent[i].a_id;
565 				acep->a_who = aclent[i].a_id;
566 				acep->a_flags |= ACE_IDENTIFIER_GROUP;
569 				acep->a_flags |= ACE_INHERIT_ONLY_ACE |
579 			acep->a_access_mask = mode_to_ace_access((mask ^ 07),
581 			acep += 1;
585 		acep->a_access_mask = mode_to_ace_access(aclent[i].a_perm,
590 			acep->a_flags |= ACE_INHERIT_ONLY_ACE |
603 			acep->a_who = (uid_t)-1;
604 			acep->a_flags |= ACE_OWNER;
605 			ace_make_deny(acep, acep + 1, isdir, B_TRUE);
606 			acep += 2;
608 			acep->a_who = aclent[i].a_id;
609 			ace_make_deny(acep, acep + 1, isdir, B_FALSE);
610 			acep += 2;
613 				acep->a_who = (uid_t)-1;
614 				acep->a_flags |= ACE_GROUP;
616 				acep->a_who = aclent[i].a_id;
618 			acep->a_flags |= ACE_IDENTIFIER_GROUP;
640 			ace_make_deny(acep, acep + skip, isdir, B_FALSE);
642 			 * If we just did the last group, skip acep past
646 				acep += numgroup + 1;
648 				acep += 1;
650 			acep->a_who = (uid_t)-1;
651 			acep->a_flags |= ACE_EVERYONE;
652 			ace_make_deny(acep, acep + 1, isdir, B_FALSE);
653 			acep += 2;
677 	ace_t *acep;
704 	error = ln_aent_to_ace(aclentp, i,  &acep, &acecnt, isdir);
712 			if (acep) {
713 				cacl_free(acep, acecnt * sizeof (ace_t));
722 		acep = cacl_realloc(acep, acesz, acesz + dfacesz);
723 		if (acep == NULL)
726 			(void) memcpy(acep + acecnt, dfacep, dfacesz);
733 	*retacep = acep;
826 access_mask_check(ace_t *acep, int mask_bit, int isowner)
833 	if (acep->a_type == ACE_ACCESS_DENIED_ACE_TYPE) {
834 		haswriteperm = (acep->a_access_mask & ACE_WRITE_DATA) ? 0 : 1;
835 		hasreadperm = (acep->a_access_mask & ACE_READ_DATA) ? 0 : 1;
837 		haswriteperm = (acep->a_access_mask & ACE_WRITE_DATA) ? 1 : 0;
838 		hasreadperm = (acep->a_access_mask & ACE_READ_DATA) ? 1 : 0;
879 			if ((acep->a_access_mask & mask_bit) &&
880 			    (acep->a_type & ACE_ACCESS_ALLOWED_ACE_TYPE)) {
905 	if (acep->a_type == ACE_ACCESS_DENIED_ACE_TYPE) {
907 			if (!(acep->a_access_mask & mask_bit)) {
911 			if (acep->a_access_mask & mask_bit) {
918 			if (!(acep->a_access_mask & mask_bit)) {
922 			if (acep->a_access_mask & mask_bit) {
931 ace_to_aent_legal(ace_t *acep)
937 	if ((acep->a_type != ACE_ACCESS_ALLOWED_ACE_TYPE) &&
938 	    (acep->a_type != ACE_ACCESS_DENIED_ACE_TYPE)) {
944 	if (acep->a_flags & ~(ACE_VALID_FLAG_BITS)) {
950 	if (acep->a_flags & (ACE_SUCCESSFUL_ACCESS_ACE_FLAG |
958 	if (acep->a_access_mask & ~(ACE_VALID_MASK_BITS)) {
963 	if ((acep->a_flags & ACE_OWNER)) {
969 	error = access_mask_check(acep, ACE_SYNCHRONIZE, isowner);
973 	error = access_mask_check(acep, ACE_WRITE_OWNER, isowner);
977 	error = access_mask_check(acep, ACE_DELETE, isowner);
981 	error = access_mask_check(acep, ACE_WRITE_ATTRIBUTES, isowner);
985 	error = access_mask_check(acep, ACE_READ_NAMED_ATTRS, isowner);
989 	error = access_mask_check(acep, ACE_WRITE_NAMED_ATTRS, isowner);
994 	if (acep->a_type == ACE_ACCESS_ALLOWED_ACE_TYPE) {
995 		if (! (acep->a_access_mask & ACE_READ_ATTRIBUTES)) {
999 		if ((acep->a_access_mask & ACE_WRITE_DATA) &&
1000 		    (! (acep->a_access_mask & ACE_APPEND_DATA))) {
1004 		if ((! (acep->a_access_mask & ACE_WRITE_DATA)) &&
1005 		    (acep->a_access_mask & ACE_APPEND_DATA)) {
1012 	if ((acep->a_access_mask & ACE_READ_ACL) &&
1013 	    (acep->a_type != ACE_ACCESS_ALLOWED_ACE_TYPE)) {
1017 	if (acep->a_access_mask & ACE_WRITE_ACL) {
1018 		if ((acep->a_type == ACE_ACCESS_DENIED_ACE_TYPE) &&
1023 		if ((acep->a_type == ACE_ACCESS_ALLOWED_ACE_TYPE) &&
1271 	ace_t *acep;
1315 		acep = &ace[i];
1318 		error = ace_to_aent_legal(acep);
1326 		acep->a_access_mask &= ~(ACE_WRITE_OWNER | ACE_DELETE |
1331 		bits = acep->a_flags &
1348 		if ((acep->a_flags & ACE_OWNER)) {
1357 		} else if ((acep->a_flags & ACE_EVERYONE)) {
1362 		} else if (acep->a_flags & ACE_IDENTIFIER_GROUP) {
1367 			if ((acep->a_flags & ACE_GROUP)) {
1373 				vals = acevals_find(acep, &acl->group,
1389 			vals = acevals_find(acep, &acl->user,
1403 		if (acep->a_type == ACE_ACCESS_ALLOWED_ACE_TYPE) {
1409 			vals->allowed = acep->a_access_mask;
1433 			vals->denied = acep->a_access_mask;
1691 ace_trivial_common(void *acep, int aclcnt,
1700 	while (cookie = walk(acep, cookie, aclcnt, &flags, &type, &mask)) {
1749 	ace_t *acep = datap;
1754 	*flags = acep[cookie].a_flags;
1755 	*type = acep[cookie].a_type;
1756 	*mask = acep[cookie++].a_access_mask;
1762 ace_trivial(ace_t *acep, int aclcnt)
1764 	return (ace_trivial_common(acep, aclcnt, ace_walk));