From 61777349f1e86cf8c8a289c04afad6cd123207c0 Mon Sep 17 00:00:00 2001
From: Jeremy Allison <jra@samba.org>
Date: Tue, 25 Jun 2019 10:32:10 -0700
Subject: [PATCH] s3: smbd: We also need to open a real directory fd when
 modifying security.

Makes the logic identical to file open.

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
---
 source3/smbd/open.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/source3/smbd/open.c b/source3/smbd/open.c
index ba13255245c..095d8c2427d 100644
--- a/source3/smbd/open.c
+++ b/source3/smbd/open.c
@@ -4242,7 +4242,10 @@ static NTSTATUS open_directory(connection_struct *conn,
 			   FILE_ADD_SUBDIRECTORY|
 			   FILE_TRAVERSE|
 			   DELETE_ACCESS|
-			   FILE_DELETE_CHILD)) {
+			   FILE_DELETE_CHILD|
+			   WRITE_DAC_ACCESS|
+			   WRITE_OWNER_ACCESS|
+			   READ_CONTROL_ACCESS)) {
 #ifdef O_DIRECTORY
 		status = fd_open(conn, fsp, O_RDONLY|O_DIRECTORY, 0);
 #else
-- 
2.47.2