Repost: Patch, Version 2: UNIX-like permissions on objects

[Corinna Vinschen]

Corinna Vinschen wrote:
> 
> Ok, I have updated from SP3 to SP4 yesterday and now, my `ntsec'-patch
> doesn't work anymore :(. More problems then ever! One core dump after
> the other. I hadn't the time, to check this out, possibly tomorrow, but
> I would already mention the problem. If anyone, who has tried my patch,
> can give me any hint or help:
> 
> HEEEEELP!

Hi!

I found the problem, it's really mysterious! Under strange circumstances,
the WinNT function `EqualSid()' smashes, if it has to compare with the
world sid (UID 0 `Everyone'). I have solved this by patching my code to the
following behaviour:

      Extract the UID from every SID and compare the resulting int's.

This works on my stand alone workstation, but I need feedback:

      Is this an adequate proceeding in NT domains?

I don't want to publish the patched code, 'til I get an informative answer to
this question.

I have solved a second problem. As description, I repost a part of my original mail:

---- repost ----
Remaining problem: NT directories have not only own permissions, but default permissions
for their files, too. The attached patch is not able, to set this rights. If somebody knows
a solution, I would be glad, to hear from you!
---- repost ----

The solution is, to set special flags in the ACE_HEADER struct:

	ace->Header.AceFlags |= OBJECT_INHERIT_ACE | CONTAINER_INHERIT_ACE;

This results in the same file permissions as the directory permissions itself.
This is the expected behaviour, IMHO.

Regards,
Corinna