mirror of
https://github.com/samba-team/samba.git
synced 2024-12-23 17:34:34 +03:00
6090601c8b
activation of global registry options in loadparm.c, mainly to
extract functionality from net_conf.c to be made availabel elsewhere
and to minimize linker dependencies.
In detail:
* move functions registry_push/pull_value from lib/util_reg.c to new file
lib/util_reg_api.c
* create a fake user token consisting of builtin administrators sid and
se_disk_operators privilege by hand instead of using get_root_nt_token()
to minimize linker deps for bin/net.
+ new function registry_create_admin_token() in new lib/util_reg_smbconf.c
+ move dup_nt_token from auth/token_util.c to new file lib/util_nttoken.c
+ adapt net_conf.c and Makefile.in accordingly.
* split lib/profiles.c into two parts: new file lib/profiles_basic.c
takes all the low level mask manipulation and format conversion functions
(se_priv, privset, luid). the privs array is completely hidden from
profiles.c by adding some access-functions. some mask-functions are not
static anymore.
Generally, SID- and LUID-related stuff that has more dependencies
is kept in lib/profiles.c
* Move initialization of regdb from net_conf.c into a function
registry_init_regdb() in lib/util_reg_smbconf.c.
Michael
(This used to be commit efd3e2bfb7)
119 lines
3.5 KiB
C
119 lines
3.5 KiB
C
|
|
/*
|
|
Unix SMB/CIFS implementation.
|
|
SMB parameters and setup
|
|
Copyright (C) Andrew Tridgell 1992-1997
|
|
Copyright (C) Luke Kenneth Casson Leighton 1996-1997
|
|
Copyright (C) Paul Ashton 1997
|
|
Copyright (C) Simo Sorce 2003
|
|
Copyright (C) Gerald (Jerry) Carter 2005
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, write to the Free Software
|
|
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
*/
|
|
|
|
#ifndef PRIVILEGES_H
|
|
#define PRIVILEGES_H
|
|
|
|
/* privilege bitmask */
|
|
|
|
#define SE_PRIV_MASKSIZE 4
|
|
|
|
typedef struct {
|
|
uint32 mask[SE_PRIV_MASKSIZE];
|
|
} SE_PRIV;
|
|
|
|
|
|
/* common privilege defines */
|
|
|
|
#define SE_END { { 0x00000000, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_NONE { { 0x00000000, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_ALL_PRIVS { { 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF } }
|
|
|
|
|
|
/*
|
|
* We will use our own set of privileges since it makes no sense
|
|
* to implement all of the Windows set when only a portion will
|
|
* be used. Use 128-bit mask to give room to grow.
|
|
*/
|
|
|
|
#define SE_NETWORK_LOGON { { 0x00000001, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_INTERACTIVE_LOGON { { 0x00000002, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_BATCH_LOGON { { 0x00000004, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_SERVICE_LOGON { { 0x00000008, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_MACHINE_ACCOUNT { { 0x00000010, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_PRINT_OPERATOR { { 0x00000020, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_ADD_USERS { { 0x00000040, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_DISK_OPERATOR { { 0x00000080, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_REMOTE_SHUTDOWN { { 0x00000100, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_BACKUP { { 0x00000200, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_RESTORE { { 0x00000400, 0x00000000, 0x00000000, 0x00000000 } }
|
|
#define SE_TAKE_OWNERSHIP { { 0x00000800, 0x00000000, 0x00000000, 0x00000000 } }
|
|
|
|
/* defined in lib/privilegs_basic.c */
|
|
|
|
extern const SE_PRIV se_priv_all;
|
|
|
|
extern const SE_PRIV se_priv_none;
|
|
extern const SE_PRIV se_machine_account;
|
|
extern const SE_PRIV se_print_operator;
|
|
extern const SE_PRIV se_add_users;
|
|
extern const SE_PRIV se_disk_operators;
|
|
extern const SE_PRIV se_remote_shutdown;
|
|
extern const SE_PRIV se_restore;
|
|
extern const SE_PRIV se_take_ownership;
|
|
|
|
|
|
/*
|
|
* These are used in Lsa replies (srv_lsa_nt.c)
|
|
*/
|
|
#define PR_NONE 0x0000
|
|
#define PR_LOG_ON_LOCALLY 0x0001
|
|
#define PR_ACCESS_FROM_NETWORK 0x0002
|
|
#define PR_LOG_ON_BATCH_JOB 0x0004
|
|
#define PR_LOG_ON_SERVICE 0x0010
|
|
|
|
|
|
typedef struct {
|
|
uint32 high;
|
|
uint32 low;
|
|
} LUID;
|
|
|
|
typedef struct {
|
|
LUID luid;
|
|
uint32 attr;
|
|
} LUID_ATTR;
|
|
|
|
#ifndef _UPPER_BOOL
|
|
typedef int BOOL;
|
|
#define _UPPER_BOOL
|
|
#endif
|
|
|
|
typedef struct {
|
|
TALLOC_CTX *mem_ctx;
|
|
BOOL ext_ctx;
|
|
uint32 count;
|
|
uint32 control;
|
|
LUID_ATTR *set;
|
|
} PRIVILEGE_SET;
|
|
|
|
typedef struct {
|
|
SE_PRIV se_priv;
|
|
const char *name;
|
|
const char *description;
|
|
LUID luid;
|
|
} PRIVS;
|
|
|
|
#endif /* PRIVILEGES_H */
|