1
0
mirror of https://github.com/samba-team/samba.git synced 2025-03-11 16:58:40 +03:00

libcli/security: sddl_encode_ace encodes resource attribute ACEs

Will work when the ace_flags table is updated.

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Douglas Bagnall 2023-07-21 16:53:45 +12:00 committed by Andrew Bartlett
parent ed52c9ed36
commit 3959fba37a

View File

@ -1041,7 +1041,20 @@ static char *sddl_transition_encode_ace(TALLOC_CTX *mem_ctx, const struct securi
sddl_type, sddl_flags, sddl_mask,
sddl_object, sddl_iobject,
sddl_trustee, sddl_conditions);
} else if (sec_ace_resource(ace->type)) {
/* encode the resource part */
const char *coda = NULL;
coda = sddl_resource_attr_from_claim(tmp_ctx,
&ace->coda.claim);
if (coda == NULL) {
DBG_WARNING("resource ACE has invalid claim\n");
goto failed;
}
sddl = talloc_asprintf(mem_ctx, "%s;%s;%s;%s;%s;%s;%s",
sddl_type, sddl_flags, sddl_mask,
sddl_object, sddl_iobject,
sddl_trustee, coda);
} else {
sddl = talloc_asprintf(mem_ctx, "%s;%s;%s;%s;%s;%s",
sddl_type, sddl_flags, sddl_mask,