samba.git/libcli/security/secace.c, branch master

libcli/security: Remove unused macro

2023-09-27T02:43:28+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

libcli/security: callback object aces are object aces

2023-09-26T23:45:35+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

libcli/security: use tabs in sec_ace_object()

2023-09-26T23:45:35+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

libcli/security: helper to find ACEs with meaningful codas

2023-09-26T23:45:35+00:00

Only Resource Attribute ACEs and Conditional ACEs are expected to have
trailing data. Others sometimes might, but we don't care what it is.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

libcli/security: helper to find resource attribute ACEs

2023-09-26T23:45:35+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

libcli/security: helper to find callback/conditional aces

2023-09-26T23:45:35+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

libcli/security: rm unused sec_ace_copy()

2023-08-24T02:53:31+00:00

Unused since 2014.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

librpc/security.idl: adjust size calculations for upcoming ace types

2023-08-24T02:53:31+00:00

Soon we will get Conditional ACEs and Resource Attribute ACES, each of
which have trailing bytes at the end of the ACE. Here's a diagram:

              ____      The ACE size field may indicate a size bigger
  .type      /    |     than the known parts, even when you take
  .flags    /     |     rounding to a multiple of four into account.
  .size  --'      |     This extra data is meaningful in some ACEs.
  .access_mask    |
  .trustee (sid) _|  <- known data ends here.
                  :
   "coda"      ___:  <- the trailing part, Zero size unless the size
                        field points beyond the end of the known data.
			Probably empty for ordinary ACE types.

Until now we have thrown away these extra bytes, because they have no
meaning in the ACE types we recognise. But with conditional and
resource attribute ACEs we need to catch and process these bytes, so
we add an extra field for that.

Thus we can drop the manually written ndr_pull_security_ace() that
discarded the trailing bytes, because we just allow it to be pulled
into an unused blob. In the very common case, the blob will be empty.

Microsoft does not use a common name across different ACE types to
describe this end-data -- "coda" is a Samba term.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

libcli/security: Avoid includes.h

2023-03-09T18:10:33+00:00

Don't rebuild libcli/security when not necessary

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison

lib: Fix whitespace

2023-03-09T18:10:33+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison