summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2007-06-27 22:45:08 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 12:23:40 -0500
commita49b2ea9c8b66d7e0fa3b256277a1b317f504a40 (patch)
tree926b090169fafc7758da335ce9117554f1f42257
parent839d4647a91f3a240dd01136290c54c7ef79bb8a (diff)
downloadsamba-a49b2ea9c8b66d7e0fa3b256277a1b317f504a40.tar.gz
samba-a49b2ea9c8b66d7e0fa3b256277a1b317f504a40.tar.bz2
samba-a49b2ea9c8b66d7e0fa3b256277a1b317f504a40.zip
r23640: When we support the SeSecurity privilage, this is where
we'll check it. Jeremy. (This used to be commit 1b73bf79f4f8a2bc408d52a1ce9df47f33fb3a87)
-rw-r--r--source3/smbd/nttrans.c21
1 files changed, 21 insertions, 0 deletions
diff --git a/source3/smbd/nttrans.c b/source3/smbd/nttrans.c
index c13e35698b..2c259713c2 100644
--- a/source3/smbd/nttrans.c
+++ b/source3/smbd/nttrans.c
@@ -702,6 +702,17 @@ int reply_ntcreate_and_X(connection_struct *conn,
}
}
+#if 0
+ /* We need to support SeSecurityPrivilege for this. */
+ if ((access_mask & SEC_RIGHT_SYSTEM_SECURITY)) &&
+ !user_has_privileges(current_user.nt_user_token,
+ &se_security)) {
+ restore_case_semantics(conn, file_attributes);
+ END_PROFILE(SMBntcreateX);
+ return ERROR_NT(NT_STATUS_PRIVILEGE_NOT_HELD);
+ }
+#endif
+
/*
* If it's a request for a directory open, deal with it separately.
*/
@@ -1378,6 +1389,16 @@ static int call_nt_transact_create(connection_struct *conn, char *inbuf, char *o
}
}
+#if 0
+ /* We need to support SeSecurityPrivilege for this. */
+ if ((access_mask & SEC_RIGHT_SYSTEM_SECURITY)) &&
+ !user_has_privileges(current_user.nt_user_token,
+ &se_security)) {
+ restore_case_semantics(conn, file_attributes);
+ return ERROR_NT(NT_STATUS_PRIVILEGE_NOT_HELD);
+ }
+#endif
+
if (ea_len) {
pdata = data + sd_len;