sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-02 09:47:23 +03:00
Code

s3: smbd: vfs_fruit: Add remove_virtual_nfs_aces() a generic NFS ACE remover.

Browse Source 
Not yet used, will be used to tidyup existing code.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13319

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
This commit is contained in:
Jeremy Allison 2018-03-15 09:52:30 -07:00
parent da39e74c39
commit ef091e2cf8
1 changed files with 43 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
source3/modules/vfs_fruit.c
View File

@ -2954,6 +2954,49 @@ static NTSTATUS readdir_attr_macmeta(struct vfs_handle_struct *handle,
return status;
}
static NTSTATUS remove_virtual_nfs_aces(struct security_descriptor *psd)
{
NTSTATUS status;
uint32_t i;
if (psd->dacl == NULL) {
return NT_STATUS_OK;
}
for (i = 0; i < psd->dacl->num_aces; i++) {
/* MS NFS style mode/uid/gid */
if (!dom_sid_compare_domain(
&global_sid_Unix_NFS,
&psd->dacl->aces[i].trustee) == 0) {
/* Normal ACE entry. */
continue;
}
/*
* security_descriptor_dacl_del()
* *must* return NT_STATUS_OK as we know
* we have something to remove.
*/
status = security_descriptor_dacl_del(psd,
&psd->dacl->aces[i].trustee);
if (!NT_STATUS_IS_OK(status)) {
DBG_WARNING("failed to remove MS NFS style ACE: %s\n",
nt_errstr(status));
return status;
}
/*
* security_descriptor_dacl_del() may delete more
* then one entry subsequent to this one if the
* SID matches, but we only need to ensure that
* we stay looking at the same element in the array.
*/
i--;
}
return NT_STATUS_OK;
}
/* Search MS NFS style ACE with UNIX mode */
static NTSTATUS check_ms_nfs(vfs_handle_struct *handle,
files_struct *fsp,