sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-11-04 00:23:49 +03:00
Code Activity

r20801: try to always fix up the acl revision when we add or remove

Browse Source 
an ace

metze
This commit is contained in:
Stefan Metzmacher
2007-01-15 10:47:22 +00:00
committed by Gerald (Jerry) Carter
parent 6ce994720c
commit 18cc56be6a
1 changed files with 38 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
source/libcli/security/security_descriptor.c
View File

@@ -150,7 +150,7 @@ NTSTATUS security_descriptor_dacl_add(struct security_descriptor *sd,
if (sd->dacl == NULL) {
return NT_STATUS_NO_MEMORY;
}
sd->dacl->revision = NT4_ACL_REVISION;
sd->dacl->revision = SECURITY_ACL_REVISION_NT4;
sd->dacl->size = 0;
sd->dacl->num_aces = 0;
sd->dacl->aces = NULL;
@@ -172,6 +172,17 @@ NTSTATUS security_descriptor_dacl_add(struct security_descriptor *sd,
return NT_STATUS_NO_MEMORY;
}
switch (sd->dacl->aces[sd->dacl->num_aces].type) {
case SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECT:
case SEC_ACE_TYPE_ACCESS_DENIED_OBJECT:
case SEC_ACE_TYPE_SYSTEM_AUDIT_OBJECT:
case SEC_ACE_TYPE_SYSTEM_ALARM_OBJECT:
sd->dacl->revision = SECURITY_ACL_REVISION_ADS;
break;
default:
break;
}
sd->dacl->num_aces++;
sd->type |= SEC_DESC_DACL_PRESENT;
@@ -187,11 +198,13 @@ NTSTATUS security_descriptor_dacl_del(struct security_descriptor *sd,
struct dom_sid *trustee)
{
int i;
bool found = false;
if (sd->dacl == NULL) {
return NT_STATUS_OBJECT_NAME_NOT_FOUND;
}
/* there can be multiple ace's for one trustee */
for (i=0;i<sd->dacl->num_aces;i++) {
if (dom_sid_equal(trustee, &sd->dacl->aces[i].trustee)) {
memmove(&sd->dacl->aces[i], &sd->dacl->aces[i+1],
@@ -200,10 +213,30 @@ NTSTATUS security_descriptor_dacl_del(struct security_descriptor *sd,
if (sd->dacl->num_aces == 0) {
sd->dacl->aces = NULL;
}
return NT_STATUS_OK;
found = true;
}
}
return NT_STATUS_OBJECT_NAME_NOT_FOUND;
if (!found) {
return NT_STATUS_OBJECT_NAME_NOT_FOUND;
}
sd->dacl->revision = SECURITY_ACL_REVISION_NT4;
for (i=0;i<sd->dacl->num_aces;i++) {
switch (sd->dacl->aces[i].type) {
case SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECT:
case SEC_ACE_TYPE_ACCESS_DENIED_OBJECT:
case SEC_ACE_TYPE_SYSTEM_AUDIT_OBJECT:
case SEC_ACE_TYPE_SYSTEM_ALARM_OBJECT:
sd->dacl->revision = SECURITY_ACL_REVISION_ADS;
return NT_STATUS_OK;
default:
break; /* only for the switch statement */
}
}
return NT_STATUS_OK;
}