1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
samba-mirror/source3
Ralph Boehme 0666093cb0 vfs_fake_acls: deny give-ownership
Windows doesn't allow giving ownership away unless the user has
SEC_PRIV_RESTORE privilege.

This follows from MS-FSA 2.1.5.1, so it's a property of the filesystem
layer, not the SMB layer. By implementing this restriction here, we can
now have test for this restriction.

Other filesystems may want to deliberately allow this behaviour --
although I'm not aware of any that does -- therefor I'm putting in this
restriction in the implementation of the chmod VFS function and not into
the caller.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=7933

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
2017-10-09 23:01:18 +02:00
..
auth auth3: Remove auth_domain 2017-09-22 00:02:29 +02:00
build
client s3:smbclient: don't try any workgroup listing with "client min protocol = SMB2" 2017-08-19 01:41:24 +02:00
exports
groupdb Correct "errror" typos. 2017-02-22 08:26:22 +01:00
include lib: Remove talloc_dict 2017-09-30 08:01:24 +02:00
intl lib: Give util_paths.c its own header 2017-06-24 01:21:10 +02:00
lib s3: VFS: Protect errno if sys_getwd() fails across free() call. 2017-10-04 10:06:15 +02:00
libads s3:libads: Fix changing passwords with Kerberos 2017-08-11 18:21:22 +02:00
libgpo s3-gpo: Fix CID #1405972 Resource leak 2017-05-09 23:20:08 +02:00
libnet rpc_client3: Avoid "cli_credentials" in cli_rpc_pipe_open_schannel_with_creds 2017-09-25 09:43:12 +02:00
librpc s3:gse_krb5: make use of precalculated krb5 keys in fill_mem_keytab_from_secrets() 2017-08-18 10:04:56 +02:00
libsmb netlogon_creds_cli: Protect netlogon_creds_cli_auth by _lck 2017-09-25 09:43:13 +02:00
locale Correct "descriptior" typos. 2017-02-22 08:26:22 +01:00
locking s3/vfs: rename SMB_VFS_STRICT_LOCK to SMB_VFS_STRICT_LOCK_CHECK 2017-07-11 03:37:44 +02:00
modules vfs_fake_acls: deny give-ownership 2017-10-09 23:01:18 +02:00
nmbd Correct "errror" typos. 2017-02-22 08:26:22 +01:00
param param: Add 'binddns dir' parameter 2017-09-05 23:58:20 +02:00
passdb samdb: Rework samdb_connect_url() to return LDB error code and an error string 2017-09-20 02:25:30 +02:00
printing s3:printing: Add NULL check for state_path() 2017-08-19 05:33:41 +02:00
profile s3-profile: reduce dependencies of smbprofile.h 2016-03-28 20:45:16 +02:00
registry s3-rpc_cli: add winreg_add_core_driver() 2017-05-09 16:43:13 +02:00
rpc_client netlogon_creds_cli: Pass "capabilities" up from creds_cli_check 2017-09-25 09:43:13 +02:00
rpc_server s3: spoolss: Fix GUID string format on GetPrinter info 2017-10-06 05:21:25 +02:00
rpcclient rpcclient: Fix "capabilities" command 2017-09-25 13:42:19 +02:00
script selftest: tests for change ownership on a file 2017-10-09 23:01:18 +02:00
selftest selftest: tests for change ownership on a file 2017-10-09 23:01:18 +02:00
services Update smbrun to allow for settings environment variables. 2016-10-13 04:26:26 +02:00
smbd s3/smbd/posix_acls: return correct status in try_chown 2017-10-09 23:01:18 +02:00
torture lib: Remove talloc_dict 2017-09-30 08:01:24 +02:00
utils smbcacls: no need to fetch the sd when changing ownership 2017-10-07 00:04:54 +02:00
web
winbindd winbind: Remove the use of "talloc_dict" 2017-09-30 08:01:24 +02:00
.clang_complete
.dmallocrc
.indent.pro
Doxyfile
mainpage.dox
smbadduser.in
wscript auth3: Remove auth_domain 2017-09-22 00:02:29 +02:00
wscript_build lib: Remove talloc_dict 2017-09-30 08:01:24 +02:00
wscript_configure_system_ncurses