Ralph Boehme b70f4f8681 CVE-2023-4091: smbd: use open_access_mask for access check in open_file() ... If the client requested FILE_OVERWRITE[_IF], we're implicitly adding FILE_WRITE_DATA to the open_access_mask in open_file_ntcreate(), but for the access check we're using access_mask which doesn't contain the additional right, which means we can end up truncating a file for which the user has only read-only access via an SD. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15439 Signed-off-by: Ralph Boehme <slow@samba.org>		2023-10-10 14:49:39 +00:00
..
auth	libcli/security: Pass in claims evaluation state when building any security token	2023-09-26 23:45:35 +00:00
build
client	libsmb: Remove a call to SMBC_errno()	2023-09-25 19:01:34 +00:00
exports
groupdb	s3:groupdb: Add missing newline to logging message	2023-08-08 04:39:38 +00:00
include	vfs: Add VFS_OPEN_HOW_WITH_BACKUP_INTENT	2023-10-05 14:00:33 +00:00
intl
lib	libsmb: Pass NTTIME to interpret_long_date()	2023-10-04 20:31:36 +00:00
libads	s3:libads: Fix building with FORTIFY_SOURCE=2	2023-10-01 22:45:38 +00:00
libgpo/gpext
libnet	s3:libnet: Fix code spelling	2023-09-11 02:42:41 +00:00
librpc	s3:rpc: bump named_pipe_auth_req_info version number	2023-09-11 02:42:41 +00:00
libsmb	pylibsmb: Add SMB2_CLOSE_FLAGS_FULL_INFORMATION constant	2023-10-10 08:19:29 +00:00
locale	s3:utils: Fix code spelling	2023-08-08 04:39:38 +00:00
locking	libcli/security: Rename dup_nt_token() -> security_token_duplicate()	2023-09-26 23:45:36 +00:00
modules	vfs: Add VFS_OPEN_HOW_WITH_BACKUP_INTENT	2023-10-05 14:00:33 +00:00
nmbd	libsmb: Pass neg contexts through sync smbXcli_negprot_recv()	2023-09-25 19:59:17 +00:00
param	docs-xml: Add new parameter "acl claims evaluation"	2023-09-26 23:45:35 +00:00
passdb	s3:passdb: Initialize ‘tm’ structure	2023-09-27 02:43:28 +00:00
printing	s3:printing: Fix code spelling	2023-08-08 04:39:38 +00:00
profile	profiling: Factor out functions to read smbprofile.tdb	2023-06-16 16:14:30 +00:00
registry	libcli/security: Rename dup_nt_token() -> security_token_duplicate()	2023-09-26 23:45:36 +00:00
rpc_client	CVE-2023-3961:s3: smbd: Remove the SMB_ASSERT() that crashes on bad pipenames.	2023-10-10 14:49:39 +00:00
rpc_server	s3:rpc_server: Fix building with FORTIFY_SOURCE=2	2023-10-01 22:45:38 +00:00
rpcclient	s3:rpcclient: Use lpcfg_set_cmdline()	2023-08-23 08:27:30 +00:00
script	s3:tests: Check if test_smbclient_kerberos.sh was successful	2023-09-25 00:14:47 +00:00
selftest	CVE-2023-3961:s3:torture: Add test SMB2-INVALID-PIPENAME to show we allow bad pipenames with unix separators through to the UNIX domain socket code.	2023-10-10 14:49:39 +00:00
services	s3:services: Disable rcinit-based service control code	2021-12-10 14:02:30 +00:00
smbd	CVE-2023-4091: smbd: use open_access_mask for access check in open_file()	2023-10-10 14:49:39 +00:00
torture	CVE-2023-3961:s3:torture: Add test SMB2-INVALID-PIPENAME to show we allow bad pipenames with unix separators through to the UNIX domain socket code.	2023-10-10 14:49:39 +00:00
utils	s3-net_rpc: Make the struct user_token array the parent talloc context	2023-09-26 23:45:36 +00:00
web
winbindd	s3-winbind: Use token as parent for token->sids in check_info3_in_group()	2023-09-26 23:45:36 +00:00
.clang_complete
.dmallocrc
.indent.pro
Doxyfile
mainpage.dox
smbadduser.in
wscript	tests: We always do smb3 unix extensions	2023-10-04 20:31:36 +00:00
wscript_build	libsmb: Make libsmb/clispnego.c static to libads/	2023-09-25 19:01:34 +00:00
wscript_configure_system_ncurses