summaryrefslogtreecommitdiffstats
path: root/source3/lib/privileges_basic.c
Commit message (Collapse)AuthorAgeFilesLines
* s3-privs Move source3/ privileges implmentation into commonAndrew Bartlett2010-09-111-458/+0
| | | | | | Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Rename structure elements for greater clarityAndrew Bartlett2010-09-111-9/+9
| | | | | | | | | It is important to make clear which is the LUID and which is the Samba-only bitmap mask. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs More clarity in variable namesAndrew Bartlett2010-09-111-4/+4
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Rename mask -> privilege_mask to be more clearAndrew Bartlett2010-09-111-26/+26
| | | | | | | | | After SE_PRIV was removed, it became less clear what these parameters were for. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3:auth Remove NT_USER_TOKENAndrew Bartlett2010-09-111-2/+2
| | | | | | | | | The all UPPER case typedef is no longer the preferred Samba style and this makes it easier to see that this is the IDL-derivied structure Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Only store low bits of luid in privileges tableAndrew Bartlett2010-09-111-17/+19
| | | | | | | | Samba only uses the low bits, and this makes the code simpler. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* privs Add my CopyrightAndrew Bartlett2010-09-111-0/+1
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Remove comment already moved to security.idlAndrew Bartlett2010-09-111-41/+0
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Use constants from security.idlAndrew Bartlett2010-09-111-9/+9
| | | | | | | | The values in security.idl have been updated to match these. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Further changes to remove SE_PRIVAndrew Bartlett2010-09-111-48/+48
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3:privileges Change SE_PRIV to be just a uint64_tAndrew Bartlett2010-09-111-24/+5
| | | | | | | | | | | | We don't need 128 possible privileges here, as we only use 12. This reverts some of 46e5effea948931509283cb84b27007d34b521c8 by Jerry back in 2005, where he introduced the SE_PRIV structure to replace the uint32_t used at the time. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-auth Rename NT_USER_TOKEN privileges -> privilege_maskAndrew Bartlett2010-08-311-2/+2
| | | | | | This is closer to the struct security_token from security.idl Andrew Bartlett
* s3-lsa: Fix static list of luids in our privileges implementation.Günther Deschner2010-06-071-9/+9
| | | | | | The high/low order changed while moving to LSA defines. Found by torture test. Guenther
* s3-privileges: use LUID defines from lsa IDL.Günther Deschner2010-06-071-11/+11
| | | | Guenther
* s3-privileges: remove trailing whitespace from privileges codes.Günther Deschner2009-05-161-60/+60
| | | | Guenther
* Use pidl for _lsa_AddPrivilegesToAccount and _lsa_RemovePrivilegesFromAccount.Günther Deschner2008-02-141-2/+2
| | | | | Guenther (This used to be commit 0c9904864b5c3b893f99abdebb18d9624aa0f560)
* Use pidl for _lsa_LookupPrivDisplayName().Günther Deschner2008-02-111-0/+4
| | | | | Guenther (This used to be commit c86640320199898cc5e3040bc3339db683e98da8)
* RIP BOOL. Convert BOOL -> bool. I found a few interestingJeremy Allison2007-10-181-13/+13
| | | | | | | | bugs in various places whilst doing this (places that assumed BOOL == int). I also need to fix the Samba4 pidl generation (next checkin). Jeremy. (This used to be commit f35a266b3cbb3e5fa6a86be60f34fe340a3ca71f)
* r23784: use the GPLv3 boilerplate as recommended by the FSF and the license textAndrew Tridgell2007-10-101-2/+1
| | | | (This used to be commit b0132e94fc5fef936aa766fb99a306b3628e9f07)
* r23779: Change from v2 or later to v3 or later.Jeremy Allison2007-10-101-1/+1
| | | | | Jeremy. (This used to be commit 407e6e695b8366369b7c76af1ff76869b45347b3)
* r23665: Remove two unneeded global variablesVolker Lendecke2007-10-101-13/+6
| | | | (This used to be commit 51a3933b3d367e3693daa6842f5a286328f4fd39)
* r23485: This checkin consists mostly of refactorings in preparation of theMichael Adam2007-10-101-0/+519
activation of global registry options in loadparm.c, mainly to extract functionality from net_conf.c to be made availabel elsewhere and to minimize linker dependencies. In detail: * move functions registry_push/pull_value from lib/util_reg.c to new file lib/util_reg_api.c * create a fake user token consisting of builtin administrators sid and se_disk_operators privilege by hand instead of using get_root_nt_token() to minimize linker deps for bin/net. + new function registry_create_admin_token() in new lib/util_reg_smbconf.c + move dup_nt_token from auth/token_util.c to new file lib/util_nttoken.c + adapt net_conf.c and Makefile.in accordingly. * split lib/profiles.c into two parts: new file lib/profiles_basic.c takes all the low level mask manipulation and format conversion functions (se_priv, privset, luid). the privs array is completely hidden from profiles.c by adding some access-functions. some mask-functions are not static anymore. Generally, SID- and LUID-related stuff that has more dependencies is kept in lib/profiles.c * Move initialization of regdb from net_conf.c into a function registry_init_regdb() in lib/util_reg_smbconf.c. Michael (This used to be commit efd3e2bfb756ac5c4df7984791c67e7ae20a582e)