Project

General

Profile

Actions
Copy link

Bug #11853

closed

Administrators should have Backup and Restore privileges by default

Added by Gordon Ross over 3 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Gordon Ross
Category:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Difficulty:
Medium
Tags:
Gerrit CR:
External Bug:

Description

On Windows, Administrators have Backup and Restore privileges by default. This allows them to bypass certain access controls (Read for Backup and Write/Delete for Restore) when a file is opened with "Backup Intent". Certain administrative tasks (such as taking ownership of an entire directory tree) are done with "backup intent" in order to avoid needing to grant Administrators explicit permissions. We should follow Windows' behavior here, and grant these privileges to Administrators by default.

Steps to Reproduce:
1. smbadm show -mp

Actual Results:
"backup" and "restore" are set to "off"

Actions
Copy link
 #1

Updated by Gordon Ross over 3 years ago

Fix is out for review as part of this PR:
https://github.com/illumos/illumos-gate/pull/68

Actions
Copy link
 #2

Updated by Electric Monk over 3 years ago

  • Status changed from In Progress to Closed
  • % Done changed from 0 to 100

git commit 3c1aa8841c55cae7b41cc9b045a71b2fffd4d0cb

commit  3c1aa8841c55cae7b41cc9b045a71b2fffd4d0cb
Author: Matt Barden <matt.barden@nexenta.com>
Date:   2019-11-14T14:23:07.000Z

    11853 Administrators should have Backup and Restore privileges by default
    Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
    Reviewed by: Evan Layton <evan.layton@nexenta.com>
    Reviewed by: Andrew Stormont <astormont@racktopsystems.com>
    Approved by: Garrett D'Amore <garrett@damore.org>

Actions
Copy link

Also available in: Atom PDF