sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-03-20 22:50:26 +03:00
Code

privs Move privilege bitmasks to security.idl

Browse Source 
Signed-off-by: Andrew Tridgell <tridge@samba.org>
This commit is contained in:
Andrew Bartlett 2010-08-27 12:44:35 +10:00
parent 99aae4a0ee
commit 821b9e61aa
2 changed files with 40 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
librpc/idl/security.idl
View File

@ -347,6 +347,45 @@ interface security
SEC_PRIV_MACHINE_ACCOUNT = 25
} sec_privilege;
/*
* We will use our own bitmap here as the Samba3 privilages.tdb records these values
*/
typedef [bitmap64bit] bitmap {
SE_NETWORK_LOGON = 0x00000001,
SE_INTERACTIVE_LOGON = 0x00000002,
SE_BATCH_LOGON = 0x00000004,
SE_SERVICE_LOGON = 0x00000008,
SE_MACHINE_ACCOUNT = 0x00000010,
/* Samba-specific privs */
SE_PRINT_OPERATOR = 0x00000020,
SE_ADD_USERS = 0x00000040,
SE_DISK_OPERATOR = 0x00000080,
SE_REMOTE_SHUTDOWN = 0x00000100,
SE_BACKUP = 0x00000200,
SE_RESTORE = 0x00000400,
SE_TAKE_OWNERSHIP = 0x00000800,
SE_INCREASE_QUOTA = 0x00001000,
SE_SECURITY = 0x00002000,
SE_LOAD_DRIVER = 0x00004000,
SE_SYSTEM_PROFILE = 0x00008000,
SE_SYSTEMTIME = 0x00010000,
SE_PROFILE_SINGLE_PROCESS = 0x00020000,
SE_INCREASE_BASE_PRIORITY = 0x00040000,
SE_CREATE_PAGEFILE = 0x00080000,
SE_SHUTDOWN = 0x00100000,
SE_DEBUG = 0x00200000,
SE_SYSTEM_ENVIRONMENT = 0x00400000,
SE_CHANGE_NOTIFY = 0x00800000,
SE_UNDOCK = 0x01000000,
SE_ENABLE_DELEGATION = 0x02000000,
SE_MANAGE_VOLUME = 0x04000000,
SE_IMPERSONATE = 0x08000000,
SE_CREATE_GLOBAL = 0x10000000,
/* Windows privs not in the list above */
SE_REMOTE_INTERACTIVE_LOGON = 0x20000000
} se_privilege;
typedef [public,bitmap8bit] bitmap {
SEC_ACE_FLAG_OBJECT_INHERIT = 0x01,

20
source3/include/privileges.h
View File

@ -26,6 +26,7 @@
#define PRIVILEGES_H
#include "../librpc/gen_ndr/lsa.h"
#include "../librpc/gen_ndr/security.h"
/* privilege bitmask */
@ -38,25 +39,6 @@ typedef uint64_t SE_PRIV;
#define SE_ALL_PRIVS (SE_PRIV)-1
/*
* We will use our own set of privileges since it makes no sense
* to implement all of the Windows set when only a portion will
* be used. Use 64-bit mask to give room to grow.
*/
#define SE_NETWORK_LOGON 0x00000001
#define SE_INTERACTIVE_LOGON 0x00000002
#define SE_BATCH_LOGON 0x00000004
#define SE_SERVICE_LOGON 0x00000008
#define SE_MACHINE_ACCOUNT 0x00000010
#define SE_PRINT_OPERATOR 0x00000020
#define SE_ADD_USERS 0x00000040
#define SE_DISK_OPERATOR 0x00000080
#define SE_REMOTE_SHUTDOWN 0x00000100
#define SE_BACKUP 0x00000200
#define SE_RESTORE 0x00000400
#define SE_TAKE_OWNERSHIP 0x00000800
/* defined in lib/privilegs_basic.c */
extern const SE_PRIV se_priv_all;