Hi,
While performing an in-house testing I tried to set SACL and DACL together on Windows 2012 server. Its not clear from the smb2 spec. But receiving an error "STATUS_INVALID_PARAMETER". Please see the scenarios that I have tried and which passed and which failed.
Case1: Setting only DACL
In the create request, the flag WRITE_DAC has been set. The following is the set info request capture.
Set info works successfully.
Case2: Setting only SACL
In the create request, the flag ACCESS_SYSTEM_SECURITY has been set. The following is the set info request capture.
Set info works successfully.