2011-06-10 17:01:15 +04:00
/*
* Unix SMB / Netbios implementation .
* SEC_DESC handling functions
* Copyright ( C ) Andrew Tridgell 1992 - 1998 ,
* Copyright ( C ) Jeremy R . Allison 1995 - 2003.
* Copyright ( C ) Luke Kenneth Casson Leighton 1996 - 1998 ,
* Copyright ( C ) Paul Ashton 1997 - 1998.
*
* This program is free software ; you can redistribute it and / or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation ; either version 3 of the License , or
* ( at your option ) any later version .
*
* This program is distributed in the hope that it will be useful ,
* but WITHOUT ANY WARRANTY ; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
* GNU General Public License for more details .
*
* You should have received a copy of the GNU General Public License
* along with this program ; if not , see < http : //www.gnu.org/licenses/>.
*/
2011-05-30 07:23:56 +04:00
# ifndef _SECDESC_H_
# define _SECDESC_H_
/* The following definitions come from libcli/security/secdesc.c */
# include "librpc/gen_ndr/security.h"
/*******************************************************************
Given a security_descriptor return the sec_info .
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
uint32_t get_sec_info ( const struct security_descriptor * sd ) ;
/*******************************************************************
Merge part of security descriptor old_sec in to the empty sections of
security descriptor new_sec .
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
struct sec_desc_buf * sec_desc_merge_buf ( TALLOC_CTX * ctx , struct sec_desc_buf * new_sdb , struct sec_desc_buf * old_sdb ) ;
struct security_descriptor * sec_desc_merge ( TALLOC_CTX * ctx , struct security_descriptor * new_sdb , struct security_descriptor * old_sdb ) ;
/*******************************************************************
Creates a struct security_descriptor structure
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
struct security_descriptor * make_sec_desc ( TALLOC_CTX * ctx ,
enum security_descriptor_revision revision ,
uint16_t type ,
const struct dom_sid * owner_sid , const struct dom_sid * grp_sid ,
struct security_acl * sacl , struct security_acl * dacl , size_t * sd_size ) ;
/*******************************************************************
Convert a secdesc into a byte stream
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
NTSTATUS marshall_sec_desc ( TALLOC_CTX * mem_ctx ,
2011-07-23 11:54:31 +04:00
const struct security_descriptor * secdesc ,
2011-05-30 07:23:56 +04:00
uint8_t * * data , size_t * len ) ;
/*******************************************************************
Convert a secdesc_buf into a byte stream
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
NTSTATUS marshall_sec_desc_buf ( TALLOC_CTX * mem_ctx ,
2011-07-23 11:54:31 +04:00
const struct sec_desc_buf * secdesc_buf ,
2011-05-30 07:23:56 +04:00
uint8_t * * data , size_t * len ) ;
/*******************************************************************
Parse a byte stream into a secdesc
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
NTSTATUS unmarshall_sec_desc ( TALLOC_CTX * mem_ctx , uint8_t * data , size_t len ,
struct security_descriptor * * psecdesc ) ;
/*******************************************************************
Parse a byte stream into a sec_desc_buf
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
NTSTATUS unmarshall_sec_desc_buf ( TALLOC_CTX * mem_ctx , uint8_t * data , size_t len ,
struct sec_desc_buf * * psecdesc_buf ) ;
/*******************************************************************
Creates a struct security_descriptor structure with typical defaults .
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
struct security_descriptor * make_standard_sec_desc ( TALLOC_CTX * ctx , const struct dom_sid * owner_sid , const struct dom_sid * grp_sid ,
struct security_acl * dacl , size_t * sd_size ) ;
/*******************************************************************
Creates a struct sec_desc_buf structure .
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
struct sec_desc_buf * make_sec_desc_buf ( TALLOC_CTX * ctx , size_t len , struct security_descriptor * sec_desc ) ;
bool sd_has_inheritable_components ( const struct security_descriptor * parent_ctr , bool container ) ;
NTSTATUS se_create_child_secdesc ( TALLOC_CTX * ctx ,
struct security_descriptor * * ppsd ,
size_t * psize ,
const struct security_descriptor * parent_ctr ,
const struct dom_sid * owner_sid ,
const struct dom_sid * group_sid ,
bool container ) ;
# endif /* _SECDESC_H_ */
