sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
Code

r15774: take care of the SYSTEM_SECURITY flag

Browse Source 
metze
(This used to be commit 98f58d710a)
This commit is contained in:
Stefan Metzmacher 2006-05-21 12:56:49 +00:00 committed by Gerald (Jerry) Carter
parent 2e415d4e98
commit 0f2c93016d
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
source4/ntvfs/posix/pvfs_acl.c
View File

@ -350,7 +350,9 @@ NTSTATUS pvfs_access_check_unix(struct pvfs_state *pvfs,
uint32_t max_bits = SEC_RIGHTS_FILE_READ | SEC_FILE_ALL;
/* owner and root get extra permissions */
if (uid == 0 || uid == name->st.st_uid) {
if (uid == 0) {
max_bits |= SEC_STD_ALL | SEC_FLAG_SYSTEM_SECURITY;
} else if (uid == name->st.st_uid) {
max_bits |= SEC_STD_ALL;
}
@ -359,6 +361,10 @@ NTSTATUS pvfs_access_check_unix(struct pvfs_state *pvfs,
return NT_STATUS_OK;
}
if (uid != 0 && (*access_mask & SEC_FLAG_SYSTEM_SECURITY)) {
return NT_STATUS_PRIVILEGE_NOT_HELD;
}
if (*access_mask & ~max_bits) {
return NT_STATUS_ACCESS_DENIED;
}