Andrew Tridgell
fcf38a38ac
r23792: convert Samba4 to GPLv3
...
There are still a few tidyups of old FSF addresses to come (in both s3
and s4). More commits soon.
2007-10-10 14:59:12 -05:00
Stefan Metzmacher
be7285bdeb
r15079: w2k3 returns NT_STATUS_PRIVILEGE_NOT_HELD if SEC_FLAG_SYSTEM_SECURITY is
...
desired but SeSecurityPrivilege isn't granted
metze
2007-10-10 14:04:07 -05:00
Stefan Metzmacher
81390dcda5
r14894: - add some 'const'
...
- remove sid_active_in_token() was the same as security_token_has_sid()
- rename some functions
metze
2007-10-10 14:00:12 -05:00
Stefan Metzmacher
9ec706238c
r14860: create libcli/security/security.h
...
metze
2007-10-10 13:59:44 -05:00
Jelmer Vernooij
51b4270513
r14542: Remove librpc, libndr and libnbt from includes.h
2007-10-10 13:58:42 -05:00
Jelmer Vernooij
1228358767
r13924: Split more prototypes out of include/proto.h + initial work on header
...
file dependencies
2007-10-10 13:52:24 -05:00
Jelmer Vernooij
70e7449318
r12608: Remove some unused #include lines.
2007-10-10 13:49:03 -05:00
Tim Potter
2f24fc7a7a
r10185: Fix another two sets of unhandled enumeration warnings, plus correct some awful indentation. (-:
2007-10-10 13:38:06 -05:00
Stefan Metzmacher
83d65d0d7e
r9240: - move struct security_token to the idl file, with this we can
...
the ndr_pull/push/print functions for it in the ntacl-lsm module
- fix compiler warnings in the ldap_encode_ndr_* code
metze
2007-10-10 13:31:37 -05:00
Andrew Tridgell
81630d3014
r4429: the owner of a file always gets SEC_STD_DELETE
2007-10-10 13:07:48 -05:00
Stefan Metzmacher
c981808ed4
r4419: move security_token stuff to the libcli/security/
...
and debug privileges
metze
2007-10-10 13:07:47 -05:00
Andrew Tridgell
e4ee8b776b
r4404: check for SEC_ACE_FLAG_INHERIT_ONLY in the "maximum allowed" logic
2007-10-10 13:07:43 -05:00
Andrew Tridgell
0fa3764edc
r4150: - add fns for manipulating the privilege_mask in a security_token
...
- add the hooks in access_check that check the privilege bitmasks for
SEC_STD_DELETE and SEC_FLAG_SYSTEM_SECURITY
2007-10-10 13:07:19 -05:00
Andrew Tridgell
7b446af09b
r4147: converted from NT_USER_TOKEN to struct security_token
...
this is mostly just a tidyup, but also adds the privilege_mask, which
I will be using shortly in ACL checking.
note that I had to move the definition of struct security_token out of
security.idl as pidl doesn't yet handle arrays of pointers, and the
usual workaround (to use a intermediate structure) would make things
too cumbersome for this structure, especially given we never encode it
to NDR.
2007-10-10 13:06:31 -05:00
Andrew Tridgell
e3500811b9
r4062: the RAW-ACLS test now passes. The SEC_STD_DELETE bit is rather strange
...
though - I expect we'll need to tweak that some more.
2007-10-10 13:06:21 -05:00
Andrew Tridgell
c7cbd966d4
r4056: modified the access check code based on results from RAW-ACLS
...
test. Also added generic mapping bits for pvfs. We don't pass RAW-ACLS
yet, but its close.
2007-10-10 13:06:20 -05:00
Andrew Tridgell
c4d21cd4b1
r4025: added a sec_access_check() function for checking security descriptors
...
against a users security token and access_mask
2007-10-10 13:06:15 -05:00
