mirror of
https://github.com/samba-team/samba.git
synced 2024-12-24 21:34:56 +03:00
e722cb25d8
* Users with SeRestorePrivilege may chown files to anyone (be it as a
backup software or directly using the ownership-tab in the security
acl editor on xp), while
* Users with SeTakeOwnershipPrivilege only can chown to themselves.
Simo, Jeremy. I think this is correct now.
Guenther
(This used to be commit 1ef7a192ee)
117 lines
3.5 KiB
C
117 lines
3.5 KiB
C
|
|
/*
|
|
Unix SMB/CIFS implementation.
|
|
SMB parameters and setup
|
|
Copyright (C) Andrew Tridgell 1992-1997
|
|
Copyright (C) Luke Kenneth Casson Leighton 1996-1997
|
|
Copyright (C) Paul Ashton 1997
|
|
Copyright (C) Simo Sorce 2003
|
|
Copyright (C) Gerald (Jerry) Carter 2005
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, write to the Free Software
|
|
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
*/
|
|
|
|
#ifndef PRIVILEGES_H
|
|
#define PRIVILEGES_H
|
|
|
|
/* privilege bitmask */
|
|
|
|
#define SE_PRIV_MASKSIZE 4
|
|
|
|
typedef struct {
|
|
uint32 mask[SE_PRIV_MASKSIZE];
|
|
} SE_PRIV;
|
|
|
|
|
|
/* common privilege defines */
|
|
|
|
#define SE_END { { 0x00000000, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_NONE { { 0x00000000, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_ALL_PRIVS { { 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF } }
|
|
|
|
|
|
/*
|
|
* We will use our own set of privileges since it makes no sense
|
|
* to implement all of the Windows set when only a portion will
|
|
* be used. Use 128-bit mask to give room to grow.
|
|
*/
|
|
|
|
#define SE_NETWORK_LOGON { { 0x00000001, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_INTERACTIVE_LOGON { { 0x00000002, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_BATCH_LOGON { { 0x00000004, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_SERVICE_LOGON { { 0x00000008, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_MACHINE_ACCOUNT { { 0x00000010, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_PRINT_OPERATOR { { 0x00000020, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_ADD_USERS { { 0x00000040, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_DISK_OPERATOR { { 0x00000080, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_REMOTE_SHUTDOWN { { 0x00000100, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_BACKUP { { 0x00000200, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_RESTORE { { 0x00000400, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_TAKE_OWNERSHIP { { 0x00000800, 0x00000000, 0x00000000, 0x00000000 } }
|
|
|
|
/* defined in lib/privilegs.c */
|
|
|
|
extern const SE_PRIV se_priv_none;
|
|
extern const SE_PRIV se_machine_account;
|
|
extern const SE_PRIV se_print_operator;
|
|
extern const SE_PRIV se_add_users;
|
|
extern const SE_PRIV se_disk_operators;
|
|
extern const SE_PRIV se_remote_shutdown;
|
|
extern const SE_PRIV se_restore;
|
|
extern const SE_PRIV se_take_ownership;
|
|
|
|
|
|
/*
|
|
* These are used in Lsa replies (srv_lsa_nt.c)
|
|
*/
|
|
#define PR_NONE 0x0000
|
|
#define PR_LOG_ON_LOCALLY 0x0001
|
|
#define PR_ACCESS_FROM_NETWORK 0x0002
|
|
#define PR_LOG_ON_BATCH_JOB 0x0004
|
|
#define PR_LOG_ON_SERVICE 0x0010
|
|
|
|
|
|
typedef struct {
|
|
uint32 high;
|
|
uint32 low;
|
|
} LUID;
|
|
|
|
typedef struct {
|
|
LUID luid;
|
|
uint32 attr;
|
|
} LUID_ATTR;
|
|
|
|
#ifndef _BOOL
|
|
typedef int BOOL;
|
|
#define _BOOL /* So we don't typedef BOOL again in vfs.h */
|
|
#endif
|
|
|
|
typedef struct {
|
|
TALLOC_CTX *mem_ctx;
|
|
BOOL ext_ctx;
|
|
uint32 count;
|
|
uint32 control;
|
|
LUID_ATTR *set;
|
|
} PRIVILEGE_SET;
|
|
|
|
typedef struct {
|
|
SE_PRIV se_priv;
|
|
const char *name;
|
|
const char *description;
|
|
LUID luid;
|
|
} PRIVS;
|
|
|
|
#endif /* PRIVILEGES_H */
|