sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-08-03 04:22:09 +03:00
Code Activity

s4-dsdb: Tests for security checks on undelete operation

Browse Source 
Implemented according to MS-ADTS 3.1.1.5.3.7.1. Unfortunately it appears
LC is also necessary, and it is not granted by default to anyone but
System and Administrator, so tests had to be done negatively

Signed-off-by: Nadezhda Ivanova <nivanova@symas.com>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Change-Id: Ic03b8fc4e222e7842ec8a9645a1bb33e7df9c438
This commit is contained in:
Nadezhda Ivanova
2014-11-04 20:08:58 +02:00
committed by Andrew Bartlett
parent def9d26868
commit ac8b8e5539
2 changed files with 135 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
python/samba/sd_utils.py
View File

@ -62,7 +62,7 @@ class SDUtils(object):
def dacl_add_ace(self, object_dn, ace):
"""Add an ACE to an objects security descriptor
"""
desc = self.read_sd_on_dn(object_dn)
desc = self.read_sd_on_dn(object_dn,["show_deleted:1"])
desc_sddl = desc.as_sddl(self.domain_sid)
if ace in desc_sddl:
return
@ -71,10 +71,10 @@ class SDUtils(object):
desc_sddl[desc_sddl.index("("):])
else:
desc_sddl = desc_sddl + ace
self.modify_sd_on_dn(object_dn, desc_sddl)
self.modify_sd_on_dn(object_dn, desc_sddl, ["show_deleted:1"])
def get_sd_as_sddl(self, object_dn, controls=None):
def get_sd_as_sddl(self, object_dn, controls=[]):
"""Return object nTSecutiryDescriptor in SDDL format
"""
desc = self.read_sd_on_dn(object_dn, controls=controls)
desc = self.read_sd_on_dn(object_dn, controls + ["show_deleted:1"])
return desc.as_sddl(self.domain_sid)