Ralph Boehme 8d355dd976 libcli/security: fix handling of deny type ACEs in access_check_max_allowed() ...

Deny ACEs must always be evaluated against explicitly granted rights
from previous ACEs.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13812

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

2019-03-04 18:11:16 +00:00

..

access_check.c

libcli/security: fix handling of deny type ACEs in access_check_max_allowed()

2019-03-04 18:11:16 +00:00

access_check.h

libcli/security: handle node initialisation in one spot in insert_in_object_tree()

2013-01-21 16:12:45 +01:00

create_descriptor.c

libcli/security: Move debug message to DBG_DEBUG()

2017-09-07 06:56:27 +02:00

display_sec.c

libcli: Use dom_sid_str_buf

2018-11-09 22:42:28 +01:00

display_sec.h

libcli/security: move display_sec headers to own header file and add to

2011-03-16 10:11:08 +01:00

dom_sid.c

libcli: Use wrapper for string to integer conversion

2019-03-01 00:32:11 +00:00

dom_sid.h

libcli/security: add dom_sid_lookup_is_predefined_domain()

2018-12-05 08:12:16 +01:00

object_tree.c

libcli-security: Add documentation for object_tree_modify_access

2013-01-21 22:31:20 +01:00

privileges_private.h

libcli/security Move 'private' privileges functions to another header

2010-09-11 18:46:13 +10:00

privileges.c

libcli: Add security_token_system_privilege().

2013-08-06 14:41:58 +02:00

privileges.h

libcli: Add security_token_system_privilege().

2013-08-06 14:41:58 +02:00

pysecurity.c

python: Port samba.security to Python 3 compatible form.

2017-09-06 11:35:18 +02:00

sddl.c

sddl: Use C99 initializer for sid_codes

2019-01-28 10:29:23 +01:00

sddl.h

s4:move the sddl code down to the top level

2010-03-03 09:16:34 +01:00

secace.c

lib: Remove some unused code

2015-08-14 07:46:12 +02:00

secace.h

lib: Remove some unused code

2015-08-14 07:46:12 +02:00

secacl.c

libcli/security: remove dup_sec_acl()

2014-05-29 01:08:25 +02:00

secacl.h

libcli/security: remove dup_sec_acl()

2014-05-29 01:08:25 +02:00

secdesc.c

libcli: Use dom_sid_str_buf

2018-11-27 07:13:14 +01:00

secdesc.h

libcli: remove unused se_create_child_secdesc_buf()

2018-05-09 19:18:43 +02:00

security_descriptor.c

libcli:security: Return early if there are no aces to duplicate

2018-12-12 22:18:52 +01:00

security_descriptor.h

libcli/security: add security_descriptor_for_client() helper function

2015-03-30 13:41:25 +02:00

security_token.c

libcli: Use dom_sid_str_buf

2018-11-27 07:13:14 +01:00

security_token.h

libcli/security: implement SECURITY_GUEST

2016-04-28 16:51:17 +02:00

security.h

lib: Add required prerequisites for librpc/gen_ndr/security.h

2016-12-28 20:17:12 +01:00

session.c

libcli/security: only announce a session as GUEST if 'Builtin\Guests' is there without 'Authenticated User'

2018-03-15 21:54:16 +01:00

session.h

libcli/security: implement SECURITY_GUEST

2016-04-28 16:51:17 +02:00

util_sid.c

libcli/security: add dom_sid_lookup_is_predefined_domain()

2018-12-05 08:12:16 +01:00

wscript_build

python: Port samba.security to Python 3 compatible form.

2017-09-06 11:35:18 +02:00