Project

General

Profile

Bug #11853

Administrators should have Backup and Restore privileges by default

Added by Gordon Ross 3 months ago. Updated 2 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Difficulty:
Medium
Tags:

Description

On Windows, Administrators have Backup and Restore privileges by default. This allows them to bypass certain access controls (Read for Backup and Write/Delete for Restore) when a file is opened with "Backup Intent". Certain administrative tasks (such as taking ownership of an entire directory tree) are done with "backup intent" in order to avoid needing to grant Administrators explicit permissions. We should follow Windows' behavior here, and grant these privileges to Administrators by default.

Steps to Reproduce:
1. smbadm show -mp

Actual Results:
"backup" and "restore" are set to "off"

History

#1

Updated by Gordon Ross 3 months ago

Fix is out for review as part of this PR:
https://github.com/illumos/illumos-gate/pull/68

#2

Updated by Electric Monk 2 months ago

  • Status changed from In Progress to Closed
  • % Done changed from 0 to 100

git commit 3c1aa8841c55cae7b41cc9b045a71b2fffd4d0cb

commit  3c1aa8841c55cae7b41cc9b045a71b2fffd4d0cb
Author: Matt Barden <matt.barden@nexenta.com>
Date:   2019-11-14T14:23:07.000Z

    11853 Administrators should have Backup and Restore privileges by default
    Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
    Reviewed by: Evan Layton <evan.layton@nexenta.com>
    Reviewed by: Andrew Stormont <astormont@racktopsystems.com>
    Approved by: Garrett D'Amore <garrett@damore.org>

Also available in: Atom PDF