|
Description
|
If an ACL is set which has an ephemeral ids in ACEs that don't have valid mappings then the intent log needs to be aware of this.
In this scenario idmap will return UID_NOBODY and the ACL will be created with UID_NOBODY instead of the ephemeral id.
The problem is that the logging code needs to be aware that the users ephemeral id was mapped to UID_NOBODY during VOP_SETSECATTR(). This is pretty easy to fix. Just need to log a dummy domain, and then during replay rather than a FUID being created, a UID_NOBODY id will be used instead.
This is a pretty unlikely scenario, but it should be handled correctly.
|