/*

  File: __apply_mask_to_mode.c

  (Linux Access Control List Management)

  Copyright (C) 1999-2002

  Andreas Gruenbacher, <a.gruenbacher@bestbits.at>

  This program is free software; you can redistribute it and/or

  modify it under the terms of the GNU Lesser General Public

  License as published by the Free Software Foundation; either

  version 2.1 of the License, or (at your option) any later version.

  This program is distributed in the hope that it will be useful,

  but WITHOUT ANY WARRANTY; without even the implied warranty of

  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU

  Lesser General Public License for more details.

  You should have received a copy of the GNU Lesser General Public

  License along with this library; if not, write to the Free Software

  Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.

*/

#include "config.h"

#include <sys/stat.h>

#include "libacl.h"

#if defined(HAVE_ACL_ENTRIES) && \

    defined (HAVE_ACL_GET_ENTRY) && defined(HAVE_ACL_GET_TAG_TYPE) && \

    defined (HAVE_ACL_GET_PERMSET) && defined(HAVE_ACL_GET_PERM)

int

__apply_mask_to_mode(mode_t *mode, acl_t acl)

{

	acl_entry_t entry;

	int entry_id=ACL_FIRST_ENTRY;

	/* A mimimal ACL which has three entries has no mask entry; the

	   group file mode permission bits are exact. */

	if (acl_entries(acl) == 3)

		return 0;

	while (acl_get_entry(acl, entry_id, &entry) == 1) {

		acl_tag_t tag_type;

		acl_get_tag_type(entry, &tag_type);

		if (tag_type == ACL_MASK) {

			acl_permset_t permset;

			acl_get_permset(entry, &permset);

			if (acl_get_perm(permset, ACL_READ) != 1)

				*mode &= ~S_IRGRP;

			if (acl_get_perm(permset, ACL_WRITE) != 1)

				*mode &= ~S_IWGRP;

			if (acl_get_perm(permset, ACL_EXECUTE) != 1)

				*mode &= ~S_IXGRP;

			return 0;

		}

		entry_id = ACL_NEXT_ENTRY;

	}

	/* This is unexpected; if the ACL didn't include a mask entry

	   we should have exited before the loop! */

	*mode &= ~S_IRWXG;

	return 1;

}

#endif