Ralph Boehme 0666093cb0 vfs_fake_acls: deny give-ownership ...

Windows doesn't allow giving ownership away unless the user has
SEC_PRIV_RESTORE privilege.

This follows from MS-FSA 2.1.5.1, so it's a property of the filesystem
layer, not the SMB layer. By implementing this restriction here, we can
now have test for this restriction.

Other filesystems may want to deliberately allow this behaviour --
although I'm not aware of any that does -- therefor I'm putting in this
restriction in the implementation of the chmod VFS function and not into
the caller.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=7933

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

2017-10-09 23:01:18 +02:00

..

auth

auth3: Remove auth_domain

2017-09-22 00:02:29 +02:00

build

waf: improve iconv checks

2014-01-03 05:04:44 +01:00

client

s3:smbclient: don't try any workgroup listing with "client min protocol = SMB2"

2017-08-19 01:41:24 +02:00

exports

…

groupdb

Correct "errror" typos.

2017-02-22 08:26:22 +01:00

include

lib: Remove talloc_dict

2017-09-30 08:01:24 +02:00

intl

lib: Give util_paths.c its own header

2017-06-24 01:21:10 +02:00

lib

s3: VFS: Protect errno if sys_getwd() fails across free() call.

2017-10-04 10:06:15 +02:00

libads

s3:libads: Fix changing passwords with Kerberos

2017-08-11 18:21:22 +02:00

libgpo

s3-gpo: Fix CID #1405972 Resource leak

2017-05-09 23:20:08 +02:00

libnet

rpc_client3: Avoid "cli_credentials" in cli_rpc_pipe_open_schannel_with_creds

2017-09-25 09:43:12 +02:00

librpc

s3:gse_krb5: make use of precalculated krb5 keys in fill_mem_keytab_from_secrets()

2017-08-18 10:04:56 +02:00

libsmb

netlogon_creds_cli: Protect netlogon_creds_cli_auth by _lck

2017-09-25 09:43:13 +02:00

locale

Correct "descriptior" typos.

2017-02-22 08:26:22 +01:00

locking

s3/vfs: rename SMB_VFS_STRICT_LOCK to SMB_VFS_STRICT_LOCK_CHECK

2017-07-11 03:37:44 +02:00

modules

vfs_fake_acls: deny give-ownership

2017-10-09 23:01:18 +02:00

nmbd

Correct "errror" typos.

2017-02-22 08:26:22 +01:00

param

param: Add 'binddns dir' parameter

2017-09-05 23:58:20 +02:00

passdb

samdb: Rework samdb_connect_url() to return LDB error code and an error string

2017-09-20 02:25:30 +02:00

printing

s3:printing: Add NULL check for state_path()

2017-08-19 05:33:41 +02:00

profile

s3-profile: reduce dependencies of smbprofile.h

2016-03-28 20:45:16 +02:00

registry

s3-rpc_cli: add winreg_add_core_driver()

2017-05-09 16:43:13 +02:00

rpc_client

netlogon_creds_cli: Pass "capabilities" up from creds_cli_check

2017-09-25 09:43:13 +02:00

rpc_server

s3: spoolss: Fix GUID string format on GetPrinter info

2017-10-06 05:21:25 +02:00

rpcclient

rpcclient: Fix "capabilities" command

2017-09-25 13:42:19 +02:00

script

selftest: tests for change ownership on a file

2017-10-09 23:01:18 +02:00

selftest

selftest: tests for change ownership on a file

2017-10-09 23:01:18 +02:00

services

Update smbrun to allow for settings environment variables.

2016-10-13 04:26:26 +02:00

smbd

s3/smbd/posix_acls: return correct status in try_chown

2017-10-09 23:01:18 +02:00

torture

lib: Remove talloc_dict

2017-09-30 08:01:24 +02:00

utils

smbcacls: no need to fetch the sd when changing ownership

2017-10-07 00:04:54 +02:00

web

swat: Remove swat.

2013-05-18 16:32:38 +02:00

winbindd

winbind: Remove the use of "talloc_dict"

2017-09-30 08:01:24 +02:00

.clang_complete

lib: Remove tdb_compat

2015-03-17 11:30:52 +01:00

.dmallocrc

…

.indent.pro

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

auth3: Remove auth_domain

2017-09-22 00:02:29 +02:00

wscript_build

lib: Remove talloc_dict

2017-09-30 08:01:24 +02:00

wscript_configure_system_ncurses

Transition to waf 1.8: wrapped conf.check_cfg

2015-03-16 03:00:07 +01:00