dsdb-descriptor: Spell out security descriptor flags as constants

Reviewed-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source4/dsdb/samdb/ldb_modules/acl_util.c b/source4/dsdb/samdb/ldb_modules/acl_util.c
index 9be376d556fbd999f288c445f786ec9c9abb0e1f..1f64ab18658621db220483aff31abfea70342015 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/acl_util.c
+++ b/source4/dsdb/samdb/ldb_modules/acl_util.c
@@ -272,7 +272,7 @@ uint32_t dsdb_request_sd_flags(struct ldb_request *req, bool *explicit)
         * equals all 4 bits
         */
        if (sd_flags == 0) {
-               sd_flags = 0xF;
+               sd_flags = SECINFO_OWNER | SECINFO_GROUP | SECINFO_DACL | SECINFO_SACL;
        }
 
        return sd_flags;

diff --git a/source4/dsdb/samdb/ldb_modules/descriptor.c b/source4/dsdb/samdb/ldb_modules/descriptor.c
index d9bc89fe62eec83d7447d5320b05231cea80021f..859558ca1e731aec0c4a03bba927b89929ed3585 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/descriptor.c
+++ b/source4/dsdb/samdb/ldb_modules/descriptor.c
@@ -643,7 +643,7 @@ static int descriptor_add(struct ldb_module *module, struct ldb_request *req)
         * The SD_FLAG control is ignored on add
         * and we default to all bits set.
         */
-       sd_flags = 0xF;
+       sd_flags = SECINFO_OWNER|SECINFO_GROUP|SECINFO_SACL|SECINFO_DACL;
 
        sd = get_new_descriptor(module, dn, req,
                                objectclass, parent_sd,