2003-10-06 05:24:48 +04:00
/*
* Unix SMB / Netbios implementation .
* SEC_ACL handling routines
* Copyright ( C ) Andrew Tridgell 1992 - 1998 ,
* Copyright ( C ) Jeremy R . Allison 1995 - 2003.
* Copyright ( C ) Luke Kenneth Casson Leighton 1996 - 1998 ,
* Copyright ( C ) Paul Ashton 1997 - 1998.
*
* This program is free software ; you can redistribute it and / or modify
* it under the terms of the GNU General Public License as published by
2007-07-09 23:25:36 +04:00
* the Free Software Foundation ; either version 3 of the License , or
2003-10-06 05:24:48 +04:00
* ( at your option ) any later version .
*
* This program is distributed in the hope that it will be useful ,
* but WITHOUT ANY WARRANTY ; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
* GNU General Public License for more details .
*
* You should have received a copy of the GNU General Public License
2007-07-10 09:23:25 +04:00
* along with this program ; if not , see < http : //www.gnu.org/licenses/>.
2003-10-06 05:24:48 +04:00
*/
# include "includes.h"
2009-03-02 10:55:00 +03:00
# include "librpc/gen_ndr/ndr_security.h"
2009-03-02 14:05:43 +03:00
# include "libcli/security/secace.h"
2011-03-19 02:45:56 +03:00
# include "libcli/security/secacl.h"
2009-03-01 20:15:36 +03:00
# define SEC_ACL_HEADER_SIZE (2 * sizeof(uint16_t) + sizeof(uint32_t))
2003-10-06 05:24:48 +04:00
/*******************************************************************
Create a SEC_ACL structure .
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
2009-03-01 20:15:36 +03:00
struct security_acl * make_sec_acl ( TALLOC_CTX * ctx ,
enum security_acl_revision revision ,
int num_aces , struct security_ace * ace_list )
2003-10-06 05:24:48 +04:00
{
2009-03-01 20:15:36 +03:00
struct security_acl * dst ;
2003-10-06 05:24:48 +04:00
int i ;
2009-03-01 20:15:36 +03:00
if ( ( dst = talloc_zero ( ctx , struct security_acl ) ) = = NULL )
2003-10-06 05:24:48 +04:00
return NULL ;
dst - > revision = revision ;
dst - > num_aces = num_aces ;
dst - > size = SEC_ACL_HEADER_SIZE ;
/* Now we need to return a non-NULL address for the ace list even
if the number of aces required is zero . This is because there
is a distinct difference between a NULL ace and an ace with zero
entries in it . This is achieved by checking that num_aces is a
positive number . */
if ( ( num_aces ) & &
2009-07-14 20:34:07 +04:00
( ( dst - > aces = talloc_array ( dst , struct security_ace , num_aces ) )
2003-10-06 05:24:48 +04:00
= = NULL ) ) {
return NULL ;
}
for ( i = 0 ; i < num_aces ; i + + ) {
2006-09-21 02:23:12 +04:00
dst - > aces [ i ] = ace_list [ i ] ; /* Structure copy. */
2003-10-06 05:24:48 +04:00
dst - > size + = ace_list [ i ] . size ;
}
return dst ;
}
/*******************************************************************
Duplicate a SEC_ACL structure .
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
2009-03-01 20:15:36 +03:00
struct security_acl * dup_sec_acl ( TALLOC_CTX * ctx , struct security_acl * src )
2003-10-06 05:24:48 +04:00
{
if ( src = = NULL )
return NULL ;
2006-09-21 02:23:12 +04:00
return make_sec_acl ( ctx , src - > revision , src - > num_aces , src - > aces ) ;
2003-10-06 05:24:48 +04:00
}