sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-05-04 06:50:23 +03:00
Code
59,292 Commits 62 Branches 1,158 Tags
Commit Graph

32 Commits

Author SHA1 Message Date
Jeremy Allison
365c6b4ce0 Restructure the ACL code some more, get the internal semantics 
right. The previous bugs were due to the fact that get_nt_acl_internal()
could return an NTSTATUS error if there was no stored ACL blob, but
otherwise would return the underlying ACL from the filysystem. Fix
this so it always returns a valid acl if it can, and if it does not
its an error to be reported back to the client. This then changes
the inherit acl code. Previously we were trying to match Windows
by setting a minimal ACL on a new file that didn't inherit anything
from a parent directory. This is silly - the returned ACL wouldn't
match the underlying UNIX permissions. The current code will correctly
inherit from a parent if a parent has any inheritable ACE entries
that apply to the new object, but will return a mapping from the
underlying UNIX permissions if the parent has no inheritable entries.
This makes much more sense for new files/directories.
Jeremy.
 2009-12-02 15:02:28 -08:00
Jelmer Vernooij
f4195183a4 s3: Use common security_descriptor_equal(). 2009-04-21 18:17:40 +02:00
Günther Deschner
f21ae452a0 s3-lib: add marshall_sec_desc_buf and unmarshall_sec_desc_buf helpers. 
Guenther
 2009-02-24 12:41:20 +01:00
Jelmer Vernooij
08259c1c52 Add iconv_convenience argument to size functions. 2009-01-01 04:45:33 +01:00
Tim Prouty
6153f622af s3: Refactor getting sec_info from a security_descriptor into separate function 2008-12-09 14:51:48 -08:00
Jeremy Allison
813bf8b4f4 Fix a subtle logic bug in the adaption of se_create_child_secdesc(), pass RAW-ACL inheritance tests. Only access masks for SD get/set left to fix. 
Jeremy.
 2008-11-08 22:57:57 -08:00
Jeremy Allison
5a2feed9dc If we didn't inherit any ACE's the ACE pointer should be NULL. 
Jeremy.
 2008-11-06 23:29:20 -08:00
Jeremy Allison
87f563c230 Start factoring out the inheritance differences. 
Jeremy.
 2008-11-06 01:58:56 -08:00
Jeremy Allison
54eaf2de74 Get closer to passing S4 RAW-ACLs. 
Jeremy.
 2008-10-31 18:04:53 -07:00
Jeremy Allison
782f309df3 Inherit Windows ACLs on a new directory. 
Jeremy.
 2008-10-30 13:51:28 -07:00
Jeremy Allison
7c53ffea28 Allow a new file to inherit the Windows ACL from its parent. 
Now to do the same for directories.
Jeremy.
 2008-10-29 13:27:14 -07:00
Jeremy Allison
e5692d4cbe Remove SEC_ACCESS. It's a uint32_t. 
Jeremy.
 2008-10-09 09:49:03 -07:00
Günther Deschner
fd3ba988dc s3-nbt: fix remaining callers of ndr_push/pull_struct_blob. 
Guenther
 2008-09-23 09:49:56 +02:00
Volker Lendecke
7cbdb48475 Remove tiny code duplication 
ndr_size_security_descriptor does the same as sec_desc_size
(This used to be commit bc3bd7a8e7c6e9e27acb195c86abb92c0f53112f)
 2007-12-29 23:13:26 +01:00
Volker Lendecke
7be5525792 Make [un]marshall_sec_desc use librpc/ndr 
(This used to be commit 387936ec3952f88d46df2d4943bbc4e408ad2bb5)
 2007-12-29 23:13:17 +01:00
Volker Lendecke
a59280792c Remove tiny code duplication 
sid_size did the same as ndr_size_dom_sid
(This used to be commit 8aec5d09ba023413bd8ecbdfbc7d23904df94389)
 2007-12-29 23:12:51 +01:00
Volker Lendecke
99b86e4a26 Some C++ fixes 
(This used to be commit 5c392c4c6e277a24d0d477902dc7856b2b46ee53)
 2007-12-21 09:58:21 +01:00
Volker Lendecke
900288a2b8 Replace sid_string_static by sid_string_dbg in DEBUGs 
(This used to be commit bb35e794ec129805e874ceba882bcc1e84791a09)
 2007-12-15 22:09:36 +01:00
Jeremy Allison
30191d1a57 RIP BOOL. Convert BOOL -> bool. I found a few interesting 
bugs in various places whilst doing this (places that assumed
BOOL == int). I also need to fix the Samba4 pidl generation
(next checkin).
Jeremy.
(This used to be commit f35a266b3cbb3e5fa6a86be60f34fe340a3ca71f)
 2007-10-18 17:40:25 -07:00
Volker Lendecke
0ebab65706 r25534: Apply some const 
Why? It moves these structs from the data into the text segment, so they
will never been copy-on-write copied. Not much, but as in German you say
"Kleinvieh macht auch Mist...."
(This used to be commit 0141e64ad4972232de867137064d0dae62da22ee)
 2007-10-10 12:31:12 -05:00
Andrew Tridgell
153cfb9c83 r23801: The FSF has moved around a lot. This fixes their Mass Ave address. 
(This used to be commit 87c91e4362c51819032bfbebbb273c52e203b227)
 2007-10-10 12:28:27 -05:00
Jeremy Allison
d824b98f80 r23779: Change from v2 or later to v3 or later. 
Jeremy.
(This used to be commit 407e6e695b8366369b7c76af1ff76869b45347b3)
 2007-10-10 12:28:20 -05:00
Jeremy Allison
be8b0685a5 r22589: Make TALLOC_ARRAY consistent across all uses. 
Jeremy.
(This used to be commit 8968808c3b5b0208cbad9ac92eaf948f2c546dd9)
 2007-10-10 12:19:49 -05:00
Volker Lendecke
575845ccbe r19963: Add 'registry shares = yes' and registry key security descriptors. 
(This used to be commit 6cab254c49e07b11c170511ec613f0f33914c3e6)
 2007-10-10 12:16:16 -05:00
Jelmer Vernooij
4db7642caa r18745: Use the Samba4 data structures for security descriptors and security descriptor 
buffers.

Make security access masks simply a uint32 rather than a structure
with a uint32 in it.
(This used to be commit b41c52b9db5fc4a553b20a7a5a051a4afced9366)
 2007-10-10 12:00:54 -05:00
Jim McDonough
2167ec9dd5 r14280: Fix Coverity #129 and 130: check before dereferencing a pointer. This 
was especially silly as we checked immediately _after_ dereferencing it
:-/
(This used to be commit 7ebfe2cb26b72d7fac397cfe3ceb14f244388224)
 2007-10-10 11:15:23 -05:00
Volker Lendecke
f04579aaf8 r14249: We've dereferenced the_acl before, no point in checking. 
Fix Coverity bug # 128.

Volker
(This used to be commit 84e9e73f3c71a0ccef76d56bc72dcd21160ed286)
 2007-10-10 11:15:20 -05:00
Jeremy Allison
dbbc06db65 r14002: Quick fix for Coverity CID #12. 
Jeremy
(This used to be commit 7c6e274cd578521192a0b0c4e6a4fb5dc7d722ac)
 2007-10-10 11:11:04 -05:00
Gerald Carter
0af1500fc0 r13316: Let the carnage begin.... 
Sync with trunk as off r13315
(This used to be commit 17e63ac4ed8325c0d44fe62b2442449f3298559f)
 2007-10-10 11:06:23 -05:00
Volker Lendecke
83e11ba86c r6263: Get rid of generate_wellknown_sids, they are const static and initializable 
statically.

Volker
(This used to be commit 3493d9f383567d286e69c0e60c0708ed400a04d9)
 2007-10-10 10:56:33 -05:00
Jeremy Allison
acf9d61421 r4088: Get medieval on our ass about malloc.... :-). Take control of all our allocation 
functions so we can funnel through some well known functions. Should help greatly with
malloc checking.
HEAD patch to follow.
Jeremy.
(This used to be commit 620f2e608f70ba92f032720c031283d295c5c06a)
 2007-10-10 10:53:32 -05:00
Simo Sorce
762e7e1dff split some security related functions in their own files. 
(no need to include all of smbd files to use some basic sec functions)

also minor compile fixes
(This used to be commit 66074d3b097d8cf2a231bf08c7f4db62da68189d)
 2003-10-06 01:24:48 +00:00