mirror of
https://github.com/samba-team/samba.git
synced 2024-12-24 21:34:56 +03:00
ad5f6b82c3
Shows bits needed to set/get a SACL. We need a script within Samba to run this
as it depends on a user with SeSecurityPrivilege to work.
Test does the following:
1). Create a test file.
2). Open with SEC_FLAG_SYSTEM_SECURITY *only*. ACCESS_DENIED.
NB. SMB2-only behavior. SMB1 allows this as tested in SMB1-SYSTEM-SECURITY.
3). Open with SEC_FLAG_SYSTEM_SECURITY|FILE_WRITE_ATTRIBUTES.
4). Write SACL. Should fail with ACCESS_DENIED (seems to need WRITE_DAC).
5). Close (3).
6). Open with SEC_FLAG_SYSTEM_SECURITY|SEC_STD_WRITE_DAC.
7). Write SACL. Success.
8). Close (4).
9). Open with SEC_FLAG_SYSTEM_SECURITY|READ_ATTRIBUTES.
10). Read SACL. Success.
11). Read DACL. Should fail with ACCESS_DENIED (no READ_CONTROL).
12). Close (9).
13 - and on error). Delete test file.
Passes against Windows 10.
Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
|
||
|---|---|---|
| .. | ||
| bench_pthreadpool.c | ||
| cmd_vfs.c | ||
| denytest.c | ||
| locktest2.c | ||
| mangle_test.c | ||
| masktest.c | ||
| msg_sink.c | ||
| msg_source.c | ||
| msgtest.c | ||
| nbench.c | ||
| nbio.c | ||
| pdbtest.c | ||
| proto.h | ||
| rpc_open_tcp.c | ||
| scanner.c | ||
| test_addrchange.c | ||
| test_async_echo.c | ||
| test_authinfo_structs.c | ||
| test_buffersize.c | ||
| test_case_insensitive.c | ||
| test_chain3.c | ||
| test_cleanup.c | ||
| test_dbwrap_ctdb.c | ||
| test_dbwrap_do_locked.c | ||
| test_dbwrap_watch.c | ||
| test_g_lock.c | ||
| test_hidenewfiles.c | ||
| test_idmap_cache.c | ||
| test_idmap_tdb_common.c | ||
| test_messaging_fd_passing.c | ||
| test_messaging_read.c | ||
| test_messaging_send_all.c | ||
| test_namemap_cache.c | ||
| test_notify_online.c | ||
| test_notify.c | ||
| test_nttrans_create.c | ||
| test_nttrans_fsctl.c | ||
| test_oplock_cancel.c | ||
| test_posix_append.c | ||
| test_pthreadpool_tevent.c | ||
| test_smb2.c | ||
| test_smbsock_any_connect.c | ||
| torture.c | ||
| utable.c | ||
| vfstest_chain.c | ||
| vfstest.c | ||
| vfstest.h | ||
| wbc_async.c | ||
| wbc_async.h | ||