summaryrefslogtreecommitdiffstats
path: root/source4/ntvfs/posix/pvfs_acl.c
Commit message (Collapse)AuthorAgeFilesLines
* r6342: fixed a bad union assumption that caused ACLs to fail on 64 bit machinesAndrew Tridgell2007-10-101-1/+1
| | | | | Thanks to lars and agruen for finding this (This used to be commit 2acc06918574b1178eecf3d61026f84f85bb40e1)
* r5298: - got rid of pstring.h from includes.h. This at least makes it a bitAndrew Tridgell2007-10-101-1/+0
| | | | | | | | | | less likely that anyone will use pstring for new code - got rid of winbind_client.h from includes.h. This one triggered a huge change, as winbind_client.h was including system/filesys.h and defining the old uint32 and uint16 types, as well as its own pstring and fstring. (This used to be commit 9db6c79e902ec538108d6b7d3324039aabe1704f)
* r5050: make sure we translate the generic to the specific bits before doing aAndrew Tridgell2007-10-101-5/+4
| | | | | | | pvfs_access_check_unix(). Fixes a problem with the cifsfs filesystem (This used to be commit 8ebc61a2297176515d767ef0f67ec912293ab905)
* r5037: got rid of all of the TALLOC_DEPRECATED stuff. My apologies for theAndrew Tridgell2007-10-101-4/+4
| | | | | | large commit. I thought this was worthwhile to get done for consistency. (This used to be commit ec32b22ed5ec224f6324f5e069d15e92e38e15c0)
* r4615: added acl checking on directory search in pvfsAndrew Tridgell2007-10-101-4/+5
| | | | (This used to be commit 0e61a422bd9a1596a284c176f033e958bbeaa8ce)
* r4595: on create check access against parent not child ...Andrew Tridgell2007-10-101-2/+2
| | | | (This used to be commit 5a1a17d3fc771b1e1c61297067f38c87901891d3)
* r4584: fix pvfs backend to pass the new enhanced RAW-ACLS test. Easy once I ↵Andrew Tridgell2007-10-101-2/+32
| | | | | | | really the strange behaviour I saw was a w2k3 bug :-) (This used to be commit e729061bcde25d0565a72222e4720ca8074ef23f)
* r4501: when copying files it is common for clients to copy the ACL. When theAndrew Tridgell2007-10-101-2/+8
| | | | | | | ACL is the default ACL this menas the copied file would have an xattr but the original would not. Avoid this by checking if the ACL being set is the original ACL, and avoid the copy. (This used to be commit 1df985a49b200a41eed39023aa668afb233f2e53)
* r4464: added pvfs backend support for the special CREATOR_OWNER and ↵Andrew Tridgell2007-10-101-1/+37
| | | | | | CREATOR_GROUP inheritance rules (This used to be commit 0a29fb45c310b4b8c348d187b8ff1833deaac6c3)
* r4448: - fixed access_mask checking on acl setAndrew Tridgell2007-10-101-2/+36
| | | | | | | | - honor the change ownership requests of acl set, changing the underlying unix owner/group - fix the access mask on file create with SEC_FLAG_MAXIMUM_ALLOWED (This used to be commit 5761fa35ab727b51ef1b52459911bafbdd788755)
* r4412: SEC_FILE_READ_ATTRIBUTE is always granted, even if not requested. ↵Andrew Tridgell2007-10-101-0/+2
| | | | | | | | This was being done in the full ACL code, but not in the unix access check code, which meant that qfileinfo was failing for some parameters (This used to be commit 96d017e521f5a996a7a274682838855d077834bc)
* r4411: when checking for create permissions, we need to check the parent, ↵Andrew Tridgell2007-10-101-1/+1
| | | | | | not the child! (This used to be commit 30b4c20b1c9aea94dd2a0611b58860797d244e5a)
* r4408: added the remaining access check hooks into pvfs. All calls should ↵Andrew Tridgell2007-10-101-0/+21
| | | | | | | now have acl checking, and obey the various inheritance rules. (This used to be commit 5fe51807d6b97e68b65f152c0f405e5c5a025d21)
* r4403: - added ACL inheritance in the pvfs backend. ACLs are now inherited onAndrew Tridgell2007-10-101-1/+163
| | | | | | | | file and directory creation via ntcreatex. pvfs now passes the inheritance test in RAW-ACLS - cleaned up the error handling a bit in pvfs_open() (This used to be commit f4dfb63d5395a365961a21388639809fcd3112d0)
* r4391: bring the default ACL inline with what w2k3 usesAndrew Tridgell2007-10-101-72/+37
| | | | (This used to be commit 16967f7502ea6d2efa0fc08decc955a1516c3a02)
* r4314: added ACL checking on unlinkAndrew Tridgell2007-10-101-0/+13
| | | | (This used to be commit f25c469693517ed993e0379d8b07cd7eb235a669)
* r4205: fixed the default acl mapping from posix permissions to use the mappedAndrew Tridgell2007-10-101-33/+33
| | | | | uid->sid and gid->sid (This used to be commit 590e1a91bfc719c2d84a9a066fb4e0308b6d9803)
* r4147: converted from NT_USER_TOKEN to struct security_tokenAndrew Tridgell2007-10-101-1/+1
| | | | | | | | | | | | this is mostly just a tidyup, but also adds the privilege_mask, which I will be using shortly in ACL checking. note that I had to move the definition of struct security_token out of security.idl as pidl doesn't yet handle arrays of pointers, and the usual workaround (to use a intermediate structure) would make things too cumbersome for this structure, especially given we never encode it to NDR. (This used to be commit 7b446af09b8050746bfc2c50e9d56aa94397cc1a)
* r4056: modified the access check code based on results from RAW-ACLSAndrew Tridgell2007-10-101-0/+41
| | | | | | test. Also added generic mapping bits for pvfs. We don't pass RAW-ACLS yet, but its close. (This used to be commit c7cbd966d49a5345ea326732587555d209c531fc)
* r4035: more effort on consistent naming of the access mask bits.Andrew Tridgell2007-10-101-1/+1
| | | | | | | | | | | This removes the duplicate named SEC_RIGHTS_MAXIMUM_ALLOWED and SEC_RIGHTS_FULL_CONTROL, which are just other names for SEC_FLAG_MAXIMUM_ALLOWED and SEC_RIGHTS_FILE_ALL. The latter names match the new naming conventions in security.idl Also added names for the generic->specific mappings for files are directories (This used to be commit 17a4e0b3aca227b40957ed1e0c57e498debc6ddf)
* r4026: added NT ACL checking on pvfs_open() for existing files. I need toAndrew Tridgell2007-10-101-2/+78
| | | | | work out some way to do a decent test suite for this. (This used to be commit 9a9a0d0e791e4b64f0a35c921729e623b977af47)
* r4011: get rid of rpc_secdes.h and replace it with a single sane set ofAndrew Tridgell2007-10-101-40/+40
| | | | | | | | | definitions for security access masks, in security.idl The previous definitions were inconsistently named, and contained many duplicate and misleading entries. I kept finding myself tripping up while using them. (This used to be commit 01c0fa722f80ceeb3f81f01987de95f365a2ed3d)
* r3995: improved the default ACL mapping from unix permsAndrew Tridgell2007-10-101-7/+11
| | | | (This used to be commit 01e89697fe837ee76fedda149e1e2b389a7d3889)
* r3990: take advantage of the uid->sid and gid->sid code to create a muchAndrew Tridgell2007-10-101-14/+91
| | | | | better default NT ACL in pvfs (This used to be commit 9ff6ecbdb6c08528193f7958d7ea7d9a8df6defd)
* r3836: - fixed the handling of NT_STATUS_BUFFER_TOO_SMALL in nttrans serverAndrew Tridgell2007-10-101-0/+1
| | | | | | | | | | | - fixed revision number on default DACL - fixed DACL_PRESENT bit in acl query with these fixes cacls.exe and the GUI ACL editor in w2k both work against pvfs. The GUI editor is slow as it times out looking up the SID -> name mappings. (This used to be commit 4468018cb63fd884920c2b0f5235bded50c6b5db)
* r3833: NTACL is a better xattr name than DosAcl (tpot suggested this)Andrew Tridgell2007-10-101-5/+5
| | | | (This used to be commit 17911eea5995c12a2300dd3928612c77f8f0883e)
* r3832: added NT ACL query/set to the posix NTVFS backend. The default ACL isAndrew Tridgell2007-10-101-0/+193
based on the current nttoken, which is completely wrong, but works as a start. The ACL is stored in the xattr system.DosAcl, using a NDR encoded IDL union with a version number to allow for future expansion. pvfs does not yet check the ACL for file access. At the moment the ACL is just query/set. We also need to do some RPC work to allow the windows ACL editor to be used. At the moment is queries the ACL fine, but displays an error when it fails to map the SIDs via rpc. (This used to be commit 3a1f20d874ab2d8b2a2f2485b7a705847abf1263)
generated by cgit (git 2.34.1) at 2024-07-07 15:20:57 +0000