1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
samba-mirror/libcli/security
Douglas Bagnall 901f77c543 pytest: security descriptors: test some conditional and RA ACEs
We have two sets of tests: one that will succeed, and one that is going
to remain a knownfail. The latter involves Resource Attribute ACEs that
have the TX type, meaning "byte string".

In MS-DTYP, a bytestring is defined like "#6869210a", with a hash,
followed by an even number of hex digits. In other places on the web, it
is mentioned that zeroes in the string can be replaced by hashes, like so
"#686921#a". We discover via indirect fuzzing that a TX RA ACE can also
take bare integers, like "6869210a" or "2023". As it would be tricky to
support this, and there is no evidence of this occurring in the wild, we
will probably leave this as a knownfail.

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-09-26 23:45:35 +00:00
..
tests pytest: security descriptors: test some conditional and RA ACEs 2023-09-26 23:45:35 +00:00
access_check.c libcli:security: Fix code spelling 2023-04-27 14:25:38 +00:00
access_check.h CVE-2023-0614 libcli/security: Make some parameters const 2023-04-05 02:10:34 +00:00
claims-conversions.c libcli:security: helpers for converting claim types 2023-09-26 23:45:35 +00:00
claims-conversions.h libcli:security: helpers for converting claim types 2023-09-26 23:45:35 +00:00
conditional_ace.c libcli:security: add code to interpret conditional ACES 2023-09-26 23:45:35 +00:00
conditional_ace.h libcli:security: add code to interpret conditional ACES 2023-09-26 23:45:35 +00:00
create_descriptor.c lbcli/security: callback object ACES fall back with no GUID 2023-09-26 23:45:35 +00:00
display_sec.c libcli:sec:display: use macro for more ace types 2023-09-07 04:53:41 +00:00
display_sec.h
dom_sid.c libcli:security: Prefer explicit initialization to ZERO_STRUCTP() 2023-09-14 21:35:29 +00:00
dom_sid.h libcli/security: Remove unused function sid_compare_domain() 2023-08-08 04:39:37 +00:00
object_tree.c libcli:security: Fix code spelling 2023-04-27 14:25:38 +00:00
privileges_private.h
privileges.c libcli:security: Fix code spelling 2023-04-27 14:25:38 +00:00
privileges.h libcli:security: Fix code spelling 2023-04-27 14:25:38 +00:00
pysecurity.c libcli/security/pysecurity: use NULL to mean NULL in C 2023-08-24 02:53:30 +00:00
sddl_conditional_ace.c libcli:security: add functions to decode and decode RA ACEs 2023-09-26 23:45:35 +00:00
sddl.c libcli/security: SDDL: add callback and resource ace type flags 2023-09-26 23:45:35 +00:00
sddl.h libcli/security: make sddl_encode_sid an external function 2023-09-07 04:53:41 +00:00
secace.c libcli/security: callback object aces are object aces 2023-09-26 23:45:35 +00:00
secace.h libcli/security: helper to find ACEs with meaningful codas 2023-09-26 23:45:35 +00:00
secacl.c libcli/security: Avoid includes.h 2023-03-09 18:10:33 +00:00
secacl.h libcli: make_sec_acl() copies the ace_list, make that const 2021-01-22 19:54:38 +00:00
secdesc.c lib: Remove a talloc_stackframe() 2023-03-09 18:10:33 +00:00
secdesc.h libcli/security: Remove unused dup_sec_desc_buf() 2019-05-22 05:59:14 +00:00
security_descriptor.c libcli:security: Fix code spelling 2023-04-27 14:25:38 +00:00
security_descriptor.h libcli/security: add security_descriptor_[s|d]acl_insert() helpers 2023-03-22 15:01:32 +00:00
security_token.c libcli/security: Remove unnecessary cast 2023-08-08 04:39:37 +00:00
security_token.h libcli: Add security_token_count_flag_sids() 2023-05-16 10:53:40 +00:00
security.h libcli:security: Fix code spelling 2023-04-27 14:25:38 +00:00
session.c libcli/security: Avoid includes.h 2023-03-09 18:10:33 +00:00
session.h libcli/security: implement SECURITY_GUEST 2016-04-28 16:51:17 +02:00
util_sid.c lib: Move few bytes of R/W data to R/O text 2023-08-14 19:53:37 +00:00
wscript_build libcli/security: test SDDL compilation in cmocka 2023-09-26 23:45:35 +00:00