sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-10 01:18:15 +03:00
Code

Revert "token_util.c: prefer capabilities over become_root"

Browse Source 
This reverts commit 944cb51506.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15583
Signed-off-by: Bjoern Jacke <bjacke@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>

Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Wed Mar 27 10:47:23 UTC 2024 on atb-devel-224

(cherry picked from commit 0dec2ef188)

Autobuild-User(v4-20-test): Jule Anger <janger@samba.org>
Autobuild-Date(v4-20-test): Wed Mar 27 16:51:00 UTC 2024 on atb-devel-224
This commit is contained in:
Björn Jacke 2024-01-25 00:46:38 +01:00 committed by Jule Anger
parent f7491b2994
commit 5cedf3b5eb
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
source3/auth/token_util.c
View File

@ -699,7 +699,7 @@ NTSTATUS finalize_local_nt_token(struct security_token *result,
/* Add in BUILTIN sids */
set_effective_capability(DAC_OVERRIDE_CAPABILITY);
become_root();
ok = secrets_fetch_domain_sid(lp_workgroup(), &_dom_sid);
if (ok) {
domain_sid = &_dom_sid;
@ -707,7 +707,7 @@ NTSTATUS finalize_local_nt_token(struct security_token *result,
DEBUG(3, ("Failed to fetch domain sid for %s\n",
lp_workgroup()));
}
drop_effective_capability(DAC_OVERRIDE_CAPABILITY);
unbecome_root();
info = talloc_zero(talloc_tos(), struct acct_info);
if (info == NULL) {