summaryrefslogtreecommitdiffstats
path: root/source3/smbd
Commit message (Collapse)AuthorAgeFilesLines
* Fix bug 8636 - When returning an ACL without SECINFO_DACL requested, we ↵Jeremy Allison2011-11-301-0/+2
| | | | | | | still set SEC_DESC_DACL_PRESENT in the type field. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Nov 30 04:59:07 CET 2011 on sn-devel-104
* Fix bug 8631 - POSIX ACE x permission becomes rx following mapping to and ↵Jeremy Allison2011-11-291-2/+2
| | | | | | | | | from a DACL Reported by David Disseldorp. Fix based on a patch by David. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Nov 29 22:32:27 CET 2011 on sn-devel-104
* s3:smb2 report access_based_dir_enum in tcon replyChristian Ambach2011-11-241-0/+5
| | | | | let the client know when hide unreadable or hide unwriteable files is set for a share
* s3:smb2 do not set allow_namespace_caching flag for a shareChristian Ambach2011-11-241-1/+1
| | | | | this matches Win7/2002R2 behavior and clients also must ignore this flag when set (MS-SMB 2.2.10), so we should not set it at all
* Move setting the inherited ACL into the main open code path. Next willJeremy Allison2011-11-221-1/+110
| | | | remove it from the ACL modules.
* Move the "set SD" code into provided SD and "inherit acls" branches.Jeremy Allison2011-11-221-29/+32
|
* Only add the SD if it's not a new stream file.Jeremy Allison2011-11-221-1/+1
|
* Move the add security descriptor code to *after* all the other meta-data isJeremy Allison2011-11-221-35/+35
| | | | updated. We may be adding an SD that restricts our own access.
* s3:smb2_negprot: add support for SMB2_22Stefan Metzmacher2011-11-201-0/+15
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sun Nov 20 16:46:45 CET 2011 on sn-devel-104
* s3:smbd: calculate the negprot signing flags from the signing_stateStefan Metzmacher2011-11-161-3/+10
| | | | | | | | | | | We should map from lp_server_signing() just once in srv_init_signing(). metze Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Nov 16 18:59:49 CET 2011 on sn-devel-104
* Final part of patchset to fix bug #8556 - ACL permissions ignored when ↵Jeremy Allison2011-11-163-16/+51
| | | | | | | | | SMBsetatr is requested. This now plumbs access checks through all setattr calls. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Nov 16 04:20:04 CET 2011 on sn-devel-104
* Remove the check for FILE_WRITE_ATTRIBUTES from smb_set_file_time(). ItJeremy Allison2011-11-153-8/+17
| | | | | | | is called from places like fileio.c that need to update the write time on a file handle only open for write, without neccessarily having FILE_WRITE_ATTRIBUTES permission. Move all checks to before the smb_set_file_time() callers.
* Always set the attribute first, before the time.Jeremy Allison2011-11-151-7/+7
|
* Move handle-based access check into handle codepath.Jeremy Allison2011-11-151-4/+4
|
* We've already checked fsp must be non-null here.Jeremy Allison2011-11-151-1/+1
|
* Remove unneeded access check. This is done inside smb_set_file_time().Jeremy Allison2011-11-151-4/+0
|
* Remove unneeded access check. This is done inside smb_set_file_size().Jeremy Allison2011-11-151-4/+0
|
* Move handle based access check into handle code path.Jeremy Allison2011-11-151-4/+4
|
* Ensure we correctly calculate reply credits over all returnedJeremy Allison2011-11-151-4/+13
| | | | | | SMB2 replies, and do as Windows does and return the total in the last SMB2 reply. Fixes an issue found by Christian M Ambach <christian.ambach@de.ibm.com> (and thanks to Christian for the initial patch this was based on).
* Remove unneeded NULL check.Jeremy Allison2011-11-151-4/+0
|
* s3:smbd/aio: handle_aio_completed() should do nothing if aio_ex->fsp is NULLStefan Metzmacher2011-11-151-0/+5
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Nov 15 18:47:55 CET 2011 on sn-devel-104
* s3:smbd/aio: pass ECANCELED to the smb2 aio handlersStefan Metzmacher2011-11-151-1/+4
| | | | metze
* s3:smb2_read: make it possible to cancel aio readsStefan Metzmacher2011-11-151-1/+16
| | | | metze
* s3:smb2_write: make it possible to cancel aio writesStefan Metzmacher2011-11-151-1/+16
| | | | metze
* s3:smbd/aio: add cancel_smb2_aio()Stefan Metzmacher2011-11-152-0/+39
| | | | metze
* s3:smb2_ioctl: STATUS_PENDING is defered by 1 millisecond for SMB2_IOCTLStefan Metzmacher2011-11-151-1/+1
| | | | metze
* s3:smb2_create: defer STATUS_PENDING for 2 seconds as beforeStefan Metzmacher2011-11-151-1/+7
| | | | metze
* s3:smb2_server: pass explicit defer_times to smbd_smb2_request_pending_queue()Stefan Metzmacher2011-11-1513-14/+15
| | | | metze
* s3:smb2_server: always send STATUS_PENDING responses, but delayed by 0.5 ↵Stefan Metzmacher2011-11-155-152/+125
| | | | | | | | milliseconds In future we'll pass the delay from the caller. metze
* s3:smb2_flush: outbody only needs 4 bytesStefan Metzmacher2011-11-141-1/+1
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Nov 14 10:01:30 CET 2011 on sn-devel-104
* s3: Avoid a race with the async echo handlerVolker Lendecke2011-11-101-33/+28
| | | | | | We can not read from the echo handler socket when we have the main socket locked. This leads to the echo responder to lock up sitting in the fcntl lock while the parent wants to read the remainder of a large packet.
* s3:smbd: don't limit the number of open dptrs for smb2 (bug #8592)Stefan Metzmacher2011-11-101-3/+12
| | | | | | | | | | This fixes a crash bug that is triggered, when a client has more than 256 directory handles with searches. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Nov 10 14:08:14 CET 2011 on sn-devel-104
* s3:smbd: fully construct the dptr before allocating a dnum in the bitmapStefan Metzmacher2011-11-101-27/+29
| | | | metze
* s3:smbd: avoid string_set() in dir.cStefan Metzmacher2011-11-101-2/+9
| | | | | | And do some more error checks. metze
* s3:smb2_server: grant credits in async interim responses (bug #8357)Stefan Metzmacher2011-11-091-1/+3
| | | | | | | | | | | The first fix for bug #8357 intruduced a regression, so that we no longer grant credits for real async interim responses with STATUS_PENDING. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Nov 9 11:56:29 CET 2011 on sn-devel-104
* Add the SEC_DIR_LIST check to dptr_create().Jeremy Allison2011-11-071-0/+27
| | | | | Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Mon Nov 7 21:11:03 CET 2011 on sn-devel-104
* Move the SEC_DIR_LIST check into dptr_create for SMB2 and now for SMB1.Jeremy Allison2011-11-052-5/+6
| | | | | | | The pathname check still needs fixing. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Nov 5 01:38:00 CET 2011 on sn-devel-104
* can_write_to_file() does now take share permissions into account. Fix comment.Jeremy Allison2011-11-041-1/+0
|
* No longer do the pre-check on DELETE_ACCESS - we're correctly checking the ↵Jeremy Allison2011-11-041-22/+0
| | | | ACL every time now.
* Remove can_access_file_acl(). We no longer need this duplicate code (hurrah!).Jeremy Allison2011-11-044-56/+9
|
* Remove can_access_file_data() - make it use the standard ↵Jeremy Allison2011-11-042-58/+5
| | | | smbd_check_access_rights() instead.
* Add const to the smb_filename argument of smbd_check_access_rights().Jeremy Allison2011-11-043-17/+9
|
* Expose smbd_check_access_rights() to other modules.Jeremy Allison2011-11-042-1/+4
|
* Rename smbd_check_open_rights() to smbd_check_access_rights() as we're going ↵Jeremy Allison2011-11-041-15/+15
| | | | to remove the static from this.
* Replace smb1_file_se_access_check() with just se_access_check().Jeremy Allison2011-11-041-30/+21
|
* Move root check out of smb1_file_se_access_check() in preparation for ↵Jeremy Allison2011-11-041-13/+25
| | | | deleting this function.
* smb1_file_se_access_check() is now static to smbd/open.cJeremy Allison2011-11-042-6/+1
|
* Revert "Change function signature of check_parent_access() to take char * ↵Jeremy Allison2011-11-042-10/+6
| | | | | | | | instead of struct smb_filename." This reverts commit a11c0a41a35aa2b1c14333552045a65e3e50df1e. Not needed.
* Revert "Call check_parent_access() on readdir."Jeremy Allison2011-11-041-13/+0
| | | | | | This reverts commit a763edaf9c76afe2546c035fc090370301dd347b. Checking the wrong thing..
* s3:smbd increase a debug levelChristian Ambach2011-11-041-5/+6
| | | | logging disconnected clients with level 1 swamps the logs