sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-28 01:58:17 +03:00
Code
4,363 Commits 62 Branches 1,153 Tags
Commit Graph

8 Commits

Author SHA1 Message Date
Andrew Tridgell
a696713b43 r4429: the owner of a file always gets SEC_STD_DELETE 
(This used to be commit 81630d3014c8cbd970bc917e3e9aef337fa211cd)
 2007-10-10 13:07:48 -05:00
Stefan Metzmacher
b5b1c52a98 r4419: move security_token stuff to the libcli/security/ 
and debug privileges

metze
(This used to be commit c981808ed4cfa63c7ba7c4f9190b6b14f74bab40)
 2007-10-10 13:07:47 -05:00
Andrew Tridgell
8631bf2bcc r4404: check for SEC_ACE_FLAG_INHERIT_ONLY in the "maximum allowed" logic 
(This used to be commit e4ee8b776ba164a89afca43de20c166ccbfddb99)
 2007-10-10 13:07:43 -05:00
Andrew Tridgell
02a9aa0892 r4150: - add fns for manipulating the privilege_mask in a security_token 
- add the hooks in access_check that check the privilege bitmasks for
  SEC_STD_DELETE and SEC_FLAG_SYSTEM_SECURITY
(This used to be commit 0fa3764edcabffe8f7d5e40f0097f97d0c4519c4)
 2007-10-10 13:07:19 -05:00
Andrew Tridgell
6ca874f71a r4147: converted from NT_USER_TOKEN to struct security_token 
this is mostly just a tidyup, but also adds the privilege_mask, which
I will be using shortly in ACL checking.

note that I had to move the definition of struct security_token out of
security.idl as pidl doesn't yet handle arrays of pointers, and the
usual workaround (to use a intermediate structure) would make things
too cumbersome for this structure, especially given we never encode it
to NDR.
(This used to be commit 7b446af09b8050746bfc2c50e9d56aa94397cc1a)
 2007-10-10 13:06:31 -05:00
Andrew Tridgell
4127edc1af r4062: the RAW-ACLS test now passes. The SEC_STD_DELETE bit is rather strange 
though - I expect we'll need to tweak that some more.
(This used to be commit e3500811b90b8423ee7694609340f394957d1160)
 2007-10-10 13:06:21 -05:00
Andrew Tridgell
4075e28a4f r4056: modified the access check code based on results from RAW-ACLS 
test. Also added generic mapping bits for pvfs. We don't pass RAW-ACLS
yet, but its close.
(This used to be commit c7cbd966d49a5345ea326732587555d209c531fc)
 2007-10-10 13:06:20 -05:00
Andrew Tridgell
1a7283a8fa r4025: added a sec_access_check() function for checking security descriptors 
against a users security token and access_mask
(This used to be commit c4d21cd4b1ccffd5aaa70a551c57f6eab1ca9c6d)
 2007-10-10 13:06:15 -05:00