summaryrefslogtreecommitdiff
path: root/libcli/security
AgeCommit message (Expand)AuthorFilesLines
2023-10-01libcli/security: Have security_ace_equal() handle callback and resource ACEsJoseph Sutton1-6/+105
2023-10-01libcli/security: Parenthesize macro parameterJoseph Sutton1-4/+4
2023-10-01libcli/security: Conform to Samba’s brace styleJoseph Sutton1-1/+2
2023-09-29libcli/security: fix talloc context for integer values (CID 1545156)Douglas Bagnall1-1/+1
2023-09-29libcli/security: test_run_condtional_ace: va_end() on errorsDouglas Bagnall1-0/+2
2023-09-29libcli/security: conditional ACEs check again for NULL/empty claimsDouglas Bagnall1-0/+9
2023-09-27libcli/security: Test hex‐escapes that should be literalsJoseph Sutton1-0/+4
2023-09-27libcli/security: Fix code formattingJoseph Sutton1-1/+1
2023-09-27libcli/security: Use ACL revision constantsJoseph Sutton1-2/+2
2023-09-27libcli/security: Refer to UTF‐16 code units rather than to codepointsJoseph Sutton1-2/+2
2023-09-27libcli/security: Remove unused flag SDDL_FLAG_IS_FAKE_OPJoseph Sutton1-4/+2
2023-09-27libcli/security: Remove unused flag SDDL_FLAG_IS_LITERALJoseph Sutton1-3/+1
2023-09-27libcli/security: Remove unused flag SDDL_FLAG_IS_ATTRJoseph Sutton1-3/+1
2023-09-27libcli/security: Remove unused flag SDDL_FLAG_EXPECTING_ENDJoseph Sutton1-4/+0
2023-09-27libcli/security: Remove unused macroJoseph Sutton1-2/+0
2023-09-27libcli:security: Add Compounded Authentication and Claims Valid SID constantsJoseph Sutton2-0/+8
2023-09-27libcli:security: Correct Asserted Identity SID definitionsJoseph Sutton1-2/+2
2023-09-27libcli:security: Use SELF SID constantJoseph Sutton1-4/+1
2023-09-27libcli:security: Add SELF SID constantJoseph Sutton2-0/+4
2023-09-27libcli/security: Emit error message if program is too largeJoseph Sutton1-0/+4
2023-09-27libcli/security: Add function to convert token claims to security attribute c...Joseph Sutton2-0/+244
2023-09-27libcli/security: Add some missing declarationsJoseph Sutton1-0/+6
2023-09-27libcli/security: Const‐qualify function parametersJoseph Sutton2-10/+10
2023-09-27libcli/security: Remove bool_value memberJoseph Sutton1-1/+1
2023-09-27libcli/security: Use correct union memberJoseph Sutton1-1/+1
2023-09-27libcli/security: Add header guardJoseph Sutton1-0/+4
2023-09-27libcli/security: condtional ACE recursive composites are not supportedDouglas Bagnall1-5/+3
2023-09-26libcli/security: conditional ace sddl: do not read nested compositesDouglas Bagnall1-8/+14
2023-09-26libcli/security: conditional ace sddl: do not write nested compositesDouglas Bagnall2-4/+3
2023-09-26libcli/security: conditional ACE sddl doesn't have string escapesDouglas Bagnall1-3/+15
2023-09-26libcl/security: conditional ACE sddl >= ops take literal parens onlyDouglas Bagnall2-5/+9
2023-09-26libcli/security/sddl_conditional_ace: ban empty expressions in SDDLDouglas Bagnall3-10/+21
2023-09-26conditional_aces: Avoid manual parsing for ace_condition_unicodeAndrew Bartlett3-131/+50
2023-09-26conditional_aces: Avoid manual parsing for ace_condition_intAndrew Bartlett1-16/+35
2023-09-26libcli/security: Check for sddl_from_conditional_ace() failure in test_sddl_c...Andrew Bartlett1-0/+10
2023-09-26libcli/security: Make failure parsing where consumed == -1 clearAndrew Bartlett1-0/+3
2023-09-26Make blob->data pointer in ace_sid_to_claim_v1_sid() a child of the DATA_BLOBAndrew Bartlett1-6/+8
2023-09-26conditional_aces: Avoid manual parsing for ace_condition_bytes, use DATA_BLOBAndrew Bartlett3-40/+48
2023-09-26conditional_aces: Avoid manual parsing for ace_condition_sidAndrew Bartlett4-35/+29
2023-09-26libcli/security: access_check handles CALLBACK_OBJECT typesDouglas Bagnall1-2/+58
2023-09-26libcli/security: se_access_check uses new callback checksDouglas Bagnall1-110/+9
2023-09-26libcli/security: sec_access_check_ds uses new callback ACE checksDouglas Bagnall1-8/+22
2023-09-26libcli/security: access_check with MAXIMUM_ALLOWED checks callbacksDouglas Bagnall1-0/+151
2023-09-26libcli/security: adjust tests for evaluate_claims flagDouglas Bagnall1-6/+10
2023-09-26libcli/security: Hook in ability to disable conditional ACE evaluationAndrew Bartlett1-0/+67
2023-09-26libcli/security: Rename dup_nt_token() -> security_token_duplicate()Andrew Bartlett2-2/+2
2023-09-26libcli/security: Move dup_nt_token() to libcli/securityAndrew Bartlett2-0/+58
2023-09-26libcli/security: Pass in claims evaluation state when building any security t...Andrew Bartlett2-2/+8
2023-09-26libcli/security: conditional ace access checks for file serverDouglas Bagnall1-0/+36
2023-09-26libcli/security: conditional ace access checks for ADDouglas Bagnall1-0/+61