Paul Chitescu paulc@voip.null.ro writes:
Changelog: wineserver: Use existing file permissions as base for applying ACLs, change mapping logic.
ACLs are applied over existing permissions. An ACCESS_ALLOWED_ACE by itself will never reduce permissions.
This doesn't make sense to me. A security descriptor with ACCESS_ALLOWED entries can still result in permissions being reduced.