summaryrefslogtreecommitdiff
path: root/libcli/security/create_descriptor.c
AgeCommit message (Collapse)AuthorFilesLines
2024-12-02libcli: Use dom_sid_dup() instead of talloc_memdup()Volker Lendecke1-2/+2
We have specialized code for this, why not use it... Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Martin Schwenke <martin@meltin.net>
2024-12-02libcli: Apply a little constVolker Lendecke1-22/+26
Probably does not matter code-wise, but looks nicer to me. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Martin Schwenke <martin@meltin.net>
2024-12-02libcli: Fix a typoVolker Lendecke1-1/+1
Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Martin Schwenke <martin@meltin.net>
2024-12-02libcli: Fix whitespaceVolker Lendecke1-1/+1
Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Martin Schwenke <martin@meltin.net>
2023-09-26lbcli/security: callback object ACES fall back with no GUIDDouglas Bagnall1-3/+15
As with other object ACEs, if there is not a GUID to refer to the ACE becomes the corresponding non-object ACE. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-09-26libcli/security/create_descriptor: calc_inherited handles new typesDouglas Bagnall1-0/+13
*_CALLBACK_OBJECT types inherit like other _OBJECT types. *_CALLBACK types do nothing, like other non-OBJECT types. We also explicitly throw unused alarm callback types and SEC_ACE_TYPE_SYSTEM_MANDATORY_LABEL and SEC_ACE_TYPE_SYSTEM_SCOPED_POLICY_ID into the fire. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-09-07libcli/security: create_descriptor handles unknown ACE typesDouglas Bagnall1-0/+8
Because we're going to add more ACE types. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-08-24libcli/security: remove unused tmp_ctx in calculate_inherited_from_parent()Douglas Bagnall1-10/+0
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-08-24libcli/security: avoid leak in calculate_inherited_from_parent()Douglas Bagnall1-6/+17
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-04-27libcli:security: Fix code spellingAndreas Schneider1-1/+1
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
2023-03-22libcli/security: rewrite calculate_inherited_from_parent()Stefan Metzmacher1-55/+192
This allows us to pass the new tests we just added. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15338 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-03-09libcli/security: Avoid includes.hVolker Lendecke1-1/+2
Don't rebuild libcli/security when not necessary Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2017-09-07libcli/security: Move debug message to DBG_DEBUG()Andrew Bartlett1-1/+1
This message shows up a lot at level 6 for no particularly good reason Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
2014-05-27libcli: Simplify desc_ace_has_generic()Volker Lendecke1-9/+6
Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
2014-05-27libcli: Simplify desc_expand_generic()Volker Lendecke1-13/+6
Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org>
2013-01-27libcli/security: calculate INHERIT_ONLY correcty for AUDIT and ALARM aces ↵Stefan Metzmacher1-4/+16
(bug #9481) Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2012-12-11libcli/security: calculate the correct inherited_object GUIDStefan Metzmacher1-1/+7
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
2012-12-11libcli/security: implement object_in_list()Stefan Metzmacher1-2/+23
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
2012-06-19Fix warning: variable ‘XX’ set but not used.Jeremy Allison1-7/+0
2011-05-06libcli/security: fix build warning, cr_descr_log_acl() is not used currently.Günther Deschner1-0/+2
Guenther
2011-02-15libcli/security - fix two output format specifiersMatthias Dieter Wallnöfer1-1/+1
2011-02-10security: Fixed some handling of ACEs with INHERITED flag provided by the userNadezhda Ivanova1-5/+16
Some tests showed that these ACEs are not removed if the DACL_PROTECTED flag is provided at the same time. This is not documented but tests prove it and it has been observerd in deployment.
2011-01-18s4-security: Fixed incorrect inheritance of IO flagged ACESNadezhda Ivanova1-0/+5
They should be inherited without the IO flag unless they contain generic information.
2011-01-13security: Fixed incorrect indentation in create_descriptor.cNadezhda Ivanova1-12/+12
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Thu Jan 13 15:53:16 CET 2011 on sn-devel-104
2011-01-11security: Fixed bugs in expansion of generic information ACEsNadezhda Ivanova1-38/+82
When an ACE gontaining GA, GE, GR, GW, CO or CG is provided by a user or inherited the final SD actually has to have 2 ACEs, one is an effective expanded one, and the original one with IO flag added.
2010-10-23create_descriptor.c - fix commentMatthias Dieter Wallnöfer1-1/+1
The location in MS-DTYPE changed. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Oct 23 21:33:46 UTC 2010 on sn-devel-104
2010-10-14libcli/auth Merge source4/libcli/security and util_sid.c into the common codeAndrew Bartlett1-0/+410
This should ensure we only have one copy of these core functions in the tree. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
generated by cgit v1.2.3 (git 2.25.1) at 2026-05-07 00:55:59 +0000