nfsd: allow setting acls with unenforceable DENYs
authorJ. Bruce Fields <bfields@redhat.com>
Thu, 26 Mar 2015 14:37:51 +0000 (10:37 -0400)
committerJ. Bruce Fields <bfields@redhat.com>
Tue, 31 Mar 2015 20:46:39 +0000 (16:46 -0400)
We've been refusing ACLs that DENY permissions that we can't effectively
deny.  (For example, we can't deny permission to read attributes.)

Andreas points out that any DENY of Window's "read", "write", or
"modify" permissions would trigger this.  That would be annoying.

So maybe we should be a little less paranoid, and ignore entirely the
permissions that are meaningless to us.

Reported-by: Andreas Gruenbacher <agruenba@redhat.com>
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
fs/nfsd/nfs4acl.c

Simple merge