sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
Code

s3-privs Move manual prototypes to common privileges.h

Browse Source 
Signed-off-by: Andrew Tridgell <tridge@samba.org>
This commit is contained in:
Andrew Bartlett 2010-08-27 09:22:31 +10:00
parent b29b6c13a3
commit 0d25212cc1
2 changed files with 88 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

88
libcli/security/privileges.h
View File

@ -71,4 +71,92 @@ typedef struct {
enum sec_privilege luid;
} PRIVS;
/***************************************************************************
copy an uint64_t structure
****************************************************************************/
bool se_priv_copy( uint64_t *dst, const uint64_t *src );
/***************************************************************************
put all privileges into a mask
****************************************************************************/
bool se_priv_put_all_privileges(uint64_t *privilege_mask);
/***************************************************************************
combine 2 uint64_t structures and store the resulting set in mew_mask
****************************************************************************/
void se_priv_add( uint64_t *privilege_mask, const uint64_t *addpriv );
/***************************************************************************
remove one uint64_t sytucture from another and store the resulting set
in mew_mask
****************************************************************************/
void se_priv_remove( uint64_t *privilege_mask, const uint64_t *removepriv );
/***************************************************************************
check if 2 uint64_t structure are equal
****************************************************************************/
bool se_priv_equal( const uint64_t *privilege_mask1, const uint64_t *privilege_mask2 );
/*********************************************************************
Lookup the uint64_t value for a privilege name
*********************************************************************/
bool se_priv_from_name( const char *name, uint64_t *privilege_mask );
/***************************************************************************
dump an uint64_t structure to the log files
****************************************************************************/
void dump_se_priv( int dbg_cl, int dbg_lvl, const uint64_t *privilege_mask );
/****************************************************************************
check if the privilege is in the privilege list
****************************************************************************/
bool is_privilege_assigned(const uint64_t *privileges,
const uint64_t *check);
const char* get_privilege_dispname( const char *name );
/****************************************************************************
Does the user have the specified privilege ? We only deal with one privilege
at a time here.
*****************************************************************************/
bool user_has_privileges(const struct security_token *token, const uint64_t *privilege_bit);
/****************************************************************************
Does the user have any of the specified privileges ? We only deal with one privilege
at a time here.
*****************************************************************************/
bool user_has_any_privilege(struct security_token *token, const uint64_t *privilege_mask);
/*******************************************************************
return the number of elements in the privlege array
*******************************************************************/
int count_all_privileges( void );
/*********************************************************************
Generate the struct lsa_LUIDAttribute structure based on a bitmask
The assumption here is that the privilege has already been validated
so we are guaranteed to find it in the list.
*********************************************************************/
struct lsa_LUIDAttribute get_privilege_luid( uint64_t *privilege_mask );
/****************************************************************************
Convert a LUID to a named string
****************************************************************************/
const char *luid_to_privilege_name(const struct lsa_LUID *set);
bool se_priv_to_privilege_set( PRIVILEGE_SET *set, uint64_t *privilege_mask );
bool privilege_set_to_se_priv( uint64_t *privilege_mask, struct lsa_PrivilegeSet *privset );
#endif /* PRIVILEGES_H */

20
source3/include/proto.h
View File

@ -651,26 +651,6 @@ NTSTATUS dup_luid_attr(TALLOC_CTX *mem_ctx, struct lsa_LUIDAttribute **new_la, s
bool is_privileged_sid( const struct dom_sid *sid );
bool grant_all_privileges( const struct dom_sid *sid );
/* The following definitions come from lib/privileges_basic.c */
bool se_priv_copy( uint64_t *dst, const uint64_t *src );
bool se_priv_put_all_privileges(uint64_t *mask);
void se_priv_add( uint64_t *mask, const uint64_t *addpriv );
void se_priv_remove( uint64_t *mask, const uint64_t *removepriv );
bool se_priv_equal( const uint64_t *mask1, const uint64_t *mask2 );
bool se_priv_from_name( const char *name, uint64_t *mask );
void dump_se_priv( int dbg_cl, int dbg_lvl, const uint64_t *mask );
bool is_privilege_assigned(const uint64_t *privileges,
const uint64_t *check);
const char* get_privilege_dispname( const char *name );
bool user_has_privileges(const struct security_token *token, const uint64_t *privilege);
bool user_has_any_privilege(struct security_token *token, const uint64_t *privilege);
int count_all_privileges( void );
struct lsa_LUIDAttribute get_privilege_luid( uint64_t *mask );
const char *luid_to_privilege_name(const struct lsa_LUID *set);
bool se_priv_to_privilege_set( PRIVILEGE_SET *set, uint64_t *mask );
bool privilege_set_to_se_priv( uint64_t *mask, struct lsa_PrivilegeSet *privset );
/* The following definitions come from lib/readline.c */
void smb_readline_done(void);