sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Code
16,309 Commits 60 Branches 1,144 Tags 452 MiB
044c6f513d
Commit Graph

20 Commits

Author SHA1 Message Date
Andrew Bartlett
e2d301accf Clarify comment on set_effective_uid() 
Andrew Bartlett
(This used to be commit ca24ae50ea)
 2004-01-27 10:01:30 +00:00
Volker Lendecke
4f62277d89 After a phonecall with jra finally commit this. 
This changes our behaviour when the setresuid call is available. We now not
only change the effective uid but also the real uid when becoming
unprivileged. This is mainly for improved AFS compatibility, as AFS selects
the token to send to the server based on the real uid of the process.

I tested this with a W2k server with two non-root 'runas' sessions. They come
in via a single smbd as two different users using two session setups. Samba on
Linux can still switch between the two uids, proved by two different files
created via those sessions.

Volker
(This used to be commit 556c62f935)
 2003-10-23 16:49:46 +00:00
Volker Lendecke
ee868462a0 Add a descriptive comment to our usage of setresuid. lib/afs.c needs 
to be changed if we decide to set our real uid. Jeremy?

Volker
(This used to be commit 1fed55aa78)
 2003-09-23 14:49:17 +00:00
Andrew Tridgell
e90b652848 updated the 3.0 branch from the head branch - ready for alpha18 
(This used to be commit 03ac082dcb)
 2002-07-15 10:35:28 +00:00
Tim Potter
1d582af3c0 Spelling fixes. 
(This used to be commit a5ac2ac4ad)
 2002-03-24 23:25:05 +00:00
Andrew Tridgell
1736b99a50 reverted tims patch that broke configure 
why does anything but smbd care about sec_init() anyway??
(This used to be commit 569505b771)
 2002-02-18 10:23:02 +00:00
Tim Potter
606fdc7c5c Whoops, typo. 
(This used to be commit e7abb79fb3)
 2002-02-17 18:56:30 +00:00
Tim Potter
d159876d64 Do a smb_panic() if sec_initial_[ug]id() or non_root_mode() is called 
without before sec_init().  This should avoid the formation of another
magic function club.  (-:
(This used to be commit 1b941e2c63)
 2002-02-17 18:32:59 +00:00
Tim Potter
cd68afe312 Removed version number from file header. 
Changed "SMB/Netbios" to "SMB/CIFS" in file header.
(This used to be commit 6a58c9bd06)
 2002-01-30 06:08:46 +00:00
Andrew Bartlett
2fc8e32ad3 Parionia to ensure people don't install libsmb based programs setuid root. 
libsmb has not been written to be setuid, with things like LIBSMB_PROG allowing
all sort of fun and games.

Andrew Bartlett
(This used to be commit 0c8e9339d8)
 2001-10-31 01:52:34 +00:00
Tim Potter
dc1fc3ee8e Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header. 
(This used to be commit 2d0922b0ea)
 2001-10-02 04:29:50 +00:00
Andrew Bartlett
9a846daf44 Restore the profiling data shmem parinoia. This whole area needs to be 
fixed - an mmaped file or the like would be a good idea.
(This used to be commit bc1385fc5e)
 2001-09-15 02:10:22 +00:00
Andrew Tridgell
03efd16d34 added sec_initial_uid() function so we can ask if a file is owned by 
the initial uid
(This used to be commit 9449544428)
 2001-07-08 18:22:46 +00:00
Andrew Tridgell
85a310c7f3 fixed inetd operation as non-root 
(This used to be commit 9a9da44455)
 2001-07-06 02:25:03 +00:00
Andrew Tridgell
413ad23faf make sure we have BOOL in autoconf usage of util_sec.c 
(This used to be commit 72f63f5144)
 2001-06-25 01:20:47 +00:00
Andrew Tridgell
8b79a473fa - make the regresison test mode code build in by default. This should 
allow us to have test targets without special configure options
- fixed make proto so that it actually does something
(This used to be commit 55109a7525)
 2001-06-25 00:46:34 +00:00
Andrew Tridgell
868d010aa1 added the ability to test smbd safely as an ordinary user. The way it works is 
that libsmb/ creates a local tcp socket then launches smbd as a subprocess
attached to that socket. smbd thinks it is being launched from inetd.

to use it do the following:

- compile with -DSMB_REGRESSION_TEST
- run like this (also works with smbtorture etc)
    export SMBD_TEST=1
    export LIBSMB_PROG=bin/smbd
    smbclient //server/share -Uuser%pass

obviously you need to setup a smb.conf etc. Using --prefix to configure
is useful.

The aim of all this stuff is to add a decent set of regression tests
to the build farm, so we know if smbd actually runs correctly on all the
platforms, not just builds. We can run smbtorture, masktest, locktest etc,
plus a bunch of smbclient scripts and any new tests we write.

This doesn't help much with nmbd (at least not yet) but its a good start.
(This used to be commit 7e8e6ae9a8)
 2001-06-22 15:14:45 +00:00
Tim Potter
4cf7fcc505 Fixed compiler warning. 
(This used to be commit 6553f1d027)
 2000-12-06 02:52:54 +00:00
Jeremy Allison
27ce49e3e6 Moved over lib/util_sec (with added fixes) as the HEAD source 
seems to have drifted a little.
Jeremy.
(This used to be commit ebcdb4afee)
 2000-02-08 11:32:43 +00:00
Andrew Tridgell
173f7e66dc util_sec.c from 2.0.6 
(This used to be commit 955d187139)
 1999-12-17 01:39:47 +00:00