gentoo-overlay/app-forensics/ovaldi/files/ovaldi-5.10.1.7-disable-acl.patch

--- a/src/probes/unix/FileProbe.cpp
+++ b/src/probes/unix/FileProbe.cpp
@@ -386,18 +386,8 @@
 	   6) If a file has an ACL, the value will be 'true'.
 	*/
 	
-	int hasExtendedAcl = acl_extended_file(filePath.c_str());
-	if(hasExtendedAcl > -1){ // behavior 4, 5, and 6
-          item->AppendElement(new ItemEntity("has_extended_acl",Common::ToString(hasExtendedAcl),OvalEnum::DATATYPE_BOOLEAN,OvalEnum::STATUS_EXISTS,0));
-	}else{
-	  if(errno == EOPNOTSUPP){ // behavior 3
-	    item->AppendElement(new ItemEntity("has_extended_acl","",OvalEnum::DATATYPE_BOOLEAN,OvalEnum::STATUS_DOES_NOT_EXIST,0));
-          }else{ // behavior 2
-	    item->AppendElement(new ItemEntity("has_extended_acl","",OvalEnum::DATATYPE_BOOLEAN,OvalEnum::STATUS_ERROR,0));
-            item->AppendMessage(new OvalMessage(string("Error reading ACL data: ") + strerror(errno)));
-          }
-	}
-
+	// behavior 1
+	item->AppendElement(new ItemEntity("has_extended_acl","",OvalEnum::DATATYPE_BOOLEAN,OvalEnum::STATUS_NOT_COLLECTED,0));
 # else
 	// behavior 1
 	item->AppendElement(new ItemEntity("has_extended_acl","",OvalEnum::DATATYPE_BOOLEAN,OvalEnum::STATUS_NOT_COLLECTED,0));