33  *			set the security parameters of file to perms (mode or acl)
58  *			set the security parameters of file to perms (mode or acl)
98  *     - reenabled recursion for setting a new mode or ACL
126  *     - added optional logging of ACL hashes to facilitate restore checks
385  *		To identify NTFS ACL meaning Posix ACL granted to root
390 #define ROOT_OWNER_UNMARK SYNCHRONIZE	/* ACL granted to root as owner */
391 #define ROOT_GROUP_UNMARK FILE_READ_EA	/* ACL granted to root as group */
1377 		printf("%*cCan access security ACL\n",-level-4,marker);  in showace()
1512 	const struct POSIX_ACL *acl;  in showposix()  local
1526 		acl = &pxdesc->acl;  in showposix()
1533 		printf("Posix ACL :\n");  in showposix()
1534 		printf("    version %d\n",(int)acl->version);  in showposix()
1535 		printf("    flags 0x%02x\n",(int)acl->flags);  in showposix()
1541 			pxace = &acl->ace[l];  in showposix()
1590 		printf("** NULL ACL\n");  in showposix()
2245 			printf("** Could not set the ACL of ");  in applyattr()
2253 					printf("ACL and attrib have been applied to ");  in applyattr()
2255 					printf("ACL has been applied to ");  in applyattr()
2261 		printf("** There was no valid ACL for ");  in applyattr()
2396 				printf("** ACL rejected, its hash is not as expected\n");  in restore()
2461  *		Merge Posix ACL rights into an u32 (self test only)
2488 	pxace = pxdesc->acl.ace;  in merge_rights()
2533 		&& (pxdesc1->acl.version == pxdesc2->acl.version)  in same_posix()
2534 		&& (pxdesc1->acl.flags == pxdesc2->acl.flags);  in same_posix()
2537 		same = (pxdesc1->acl.ace[i].tag == pxdesc2->acl.ace[i].tag)  in same_posix()
2538 		   && (pxdesc1->acl.ace[i].perms == pxdesc2->acl.ace[i].perms)  in same_posix()
2539 		   && (pxdesc1->acl.ace[i].id == pxdesc2->acl.ace[i].id);  in same_posix()
2544 		same = (pxdesc1->acl.ace[i].tag == pxdesc2->acl.ace[i].tag)  in same_posix()
2545 		   && (pxdesc1->acl.ace[i].perms == pxdesc2->acl.ace[i].perms)  in same_posix()
2546 		   && (pxdesc1->acl.ace[i].id == pxdesc2->acl.ace[i].id);  in same_posix()
2632 	ACL *pacl;  in build_dummy_descr()
2660 	    + sizeof(ACL)	/* acl header */  in build_dummy_descr()
2670 			 * The flag SE_DACL_PROTECTED prevents the ACL  in build_dummy_descr()
2676 			 * Windows prefers ACL first, do the same to  in build_dummy_descr()
2679 		/* build the ACL header */  in build_dummy_descr()
2681 		pacl = (ACL*)&attr[pos];  in build_dummy_descr()
2690 		pos += sizeof(ACL);  in build_dummy_descr()
2691 		aclsz = sizeof(ACL);  in build_dummy_descr()
2712 		/* positions of ACL, USID and GSID into header */  in build_dummy_descr()
3175 	const ACL *pacl;  in basictest()
3177 		ERRMA, ERRPA, /* error converting mode or Posix ACL to NTFS */  in basictest()
3178 		ERRAM, ERRAP, /* error converting NTFS to mode or Posix ACL */  in basictest()
3216 			pacl = (const ACL*)&attr[le32_to_cpu(phead->dacl)];  in basictest()
3222 			 * Build a NTFS ACL from a mode, and  in basictest()
3223 			 * decode to a Posix ACL, expecting to  in basictest()
3235 			 * Build a NTFS ACL from the Posix ACL, expecting to  in basictest()
3236 			 * get exactly the same NTFS ACL, then decode to a  in basictest()
3245 					pacl = (const ACL*)&attr[le32_to_cpu(phead->dacl)];  in basictest()
3365  *		Check whether Posix ACL settings are interpreted
3390 	const ACL *pacl;  in posixtest()
3393 		ERRMA, ERRPA, /* error converting mode or Posix ACL to NTFS */  in posixtest()
3394 		ERRAM, ERRAP, /* error converting NTFS to mode or Posix ACL */  in posixtest()
3459 	pxdesc->acl.version = POSIX_VERSION;  in posixtest()
3460 	pxdesc->acl.flags = 0;  in posixtest()
3461 	pxdesc->acl.filler = 0;  in posixtest()
3463 	pxdesc->acl.ace[0].tag = POSIX_ACL_USER_OBJ;  in posixtest()
3464 	pxdesc->acl.ace[0].id = -1;  in posixtest()
3466 		pxdesc->acl.ace[1].tag = POSIX_ACL_GROUP_OBJ;  in posixtest()
3467 		pxdesc->acl.ace[1].id = -1;  in posixtest()
3468 		pxdesc->acl.ace[2].tag = POSIX_ACL_MASK;  in posixtest()
3469 		pxdesc->acl.ace[2].id = -1;  in posixtest()
3470 		pxdesc->acl.ace[3].tag = POSIX_ACL_OTHER;  in posixtest()
3471 		pxdesc->acl.ace[3].id = -1;  in posixtest()
3473 		pxdesc->acl.ace[1].tag = POSIX_ACL_USER;  in posixtest()
3474 		pxdesc->acl.ace[1].id = (kind & 16 ? 0 : 1000);  in posixtest()
3475 		pxdesc->acl.ace[2].tag = POSIX_ACL_GROUP_OBJ;  in posixtest()
3476 		pxdesc->acl.ace[2].id = -1;  in posixtest()
3477 		pxdesc->acl.ace[3].tag = POSIX_ACL_GROUP;  in posixtest()
3478 		pxdesc->acl.ace[3].id = (kind & 16 ? 0 : 1002);  in posixtest()
3479 		pxdesc->acl.ace[4].tag = POSIX_ACL_MASK;  in posixtest()
3480 		pxdesc->acl.ace[4].id = -1;  in posixtest()
3481 		pxdesc->acl.ace[5].tag = POSIX_ACL_OTHER;  in posixtest()
3482 		pxdesc->acl.ace[5].id = -1;  in posixtest()
3499 		pxdesc->acl.ace[0].perms = ownobj;  in posixtest()
3501 			pxdesc->acl.ace[1].perms = grpobj;  in posixtest()
3502 			pxdesc->acl.ace[2].perms = mask;  in posixtest()
3503 			pxdesc->acl.ace[3].perms = wrld;  in posixtest()
3505 			pxdesc->acl.ace[1].perms = usr;  in posixtest()
3506 			pxdesc->acl.ace[2].perms = grpobj;  in posixtest()
3507 			pxdesc->acl.ace[3].perms = grp;  in posixtest()
3508 			pxdesc->acl.ace[4].perms = mask;  in posixtest()
3509 			pxdesc->acl.ace[5].perms = wrld;  in posixtest()
3517 			pacl = (const ACL*)&pxattr[le32_to_cpu(phead->dacl)];  in posixtest()
3525 						printf("Non matching got back Posix ACL\n");  in posixtest()
3526 						printf("input ACL\n");  in posixtest()
3534 						printf("gotback ACL\n");  in posixtest()
3539 					printf("Got back an invalid Posix ACL\n");  in posixtest()
3544 				printf("Could not get Posix ACL back\n");  in posixtest()
3549 			printf("NTFS ACL incorrect or not build\n");  in posixtest()
3550 			printf("input ACL\n");  in posixtest()
3558 				printf("gotback ACL\n");  in posixtest()
3561 				printf("no gotback ACL\n");  in posixtest()
3833 			printf("Posix equivalent of old ACL :\n");  in setfull_posix()
3851 				printf("New Posix ACL :\n");  in setfull_posix()
4441 						"cannot display the Posix ACL\n");  in showmounted()
4482 			printf("** Could not get the NTFS ACL, check whether file is on NTFS\n");  in showmounted()
4519 			printf("** Could not get the NTFS ACL, check whether file is on NTFS\n");  in processmounted()
4737 			printf("#\n# Recursive ACL collection on %s#\n",txtime);  in backup()
4829 				fprintf(stderr,"*** Could not get the ACL of ");  in mapproposal()
5575  *		Encode a Posix ACL string
5596 	struct POSIX_ACL *acl;  in encode_posix_acl()  local
5639 		acl = &pxdesc->acl;  in encode_posix_acl()
5765 					acl->ace[i].tag = tag;  in encode_posix_acl()
5766 					acl->ace[i].perms = perms;  in encode_posix_acl()
5767 					acl->ace[i].id = id;  in encode_posix_acl()
5784 					acl->ace[i].tag = tag;  in encode_posix_acl()
5785 					acl->ace[i].perms = perms;  in encode_posix_acl()
5786 					acl->ace[i].id = id;  in encode_posix_acl()
5811 			acl->ace[i].tag = POSIX_ACL_MASK;  in encode_posix_acl()
5812 			acl->ace[i].perms = apermsset;  in encode_posix_acl()
5813 			acl->ace[i].id = -1;  in encode_posix_acl()
5817 			acl->ace[i].tag = POSIX_ACL_MASK;  in encode_posix_acl()
5818 			acl->ace[i].perms = dpermsset;  in encode_posix_acl()
5819 			acl->ace[i].id = -1;  in encode_posix_acl()
5824 			tagsset |= acl->ace[i].tag;  in encode_posix_acl()
5825 			switch (acl->ace[i].tag) {  in encode_posix_acl()
5827 				mode |= acl->ace[i].perms << 6;  in encode_posix_acl()
5832 					mode |= acl->ace[i].perms << 3;  in encode_posix_acl()
5835 				mode |= acl->ace[i].perms;  in encode_posix_acl()
5840 						| (acl->ace[i].perms << 3);  in encode_posix_acl()
5848 		pxdesc->acl.version = POSIX_VERSION;  in encode_posix_acl()
5849 		pxdesc->acl.flags = 0;  in encode_posix_acl()
5850 		pxdesc->acl.filler = 0;  in encode_posix_acl()
5862 				fprintf(stderr,"Bad ACL description\n");  in encode_posix_acl()
5981 	fprintf(stderr,"   Notes: perms can be an octal mode or a Posix ACL description\n");  in usage()
6018 	fprintf(stderr,"   Notes: perms can be an octal mode or a Posix ACL description\n");  in usage()