https://fedorahosted.org/389/ticket/448 https://fedorahosted.org/389/attachment/ticket/448/0001-Trac-Ticket-448-Possible-to-set-invalid-macros-in-Ma.patch Bug description: Syntax checking code in acl did not check the macro syntax. Thus, invalide macro such as ($bogus.description) could have been unexpectedly added. Fix description: This patch adds the checking code: If acl contains a keyword starting with "($" or "[$", only one of "($dn)", "[$dn]", or "($attr." is allowed. -- 389-devel mailing list 389-devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-devel
