samba -- ACLs are not checked on opening an alternate data stream on a file or directory

2013-06-12T00:00:00
ID A4F08579-516C-11E3-9B62-000C292E4FD8
Type freebsd
Reporter FreeBSD
Modified 2013-06-12T00:00:00

Description

The Samba project reports:

Samba versions 3.2.0 and above (all versions of 3.2.x, 3.3.x, 3.4.x, 3.5.x, 3.6.x, 4.0.x and 4.1.x) do not check the underlying file or directory ACL when opening an alternate data stream. According to the SMB1 and SMB2+ protocols the ACL on an underlying file or directory should control what access is allowed to alternate data streams that are associated with the file or directory.