summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGünther Deschner <gd@samba.org>2007-11-05 02:33:58 +0100
committerGünther Deschner <gd@samba.org>2007-11-05 03:26:01 +0100
commitfc22f295d06f243c86acc6a9ef042417007677e5 (patch)
treeb2ae6344f774a446ae07991be974f95f9cb560c9
parent002df2ae3b1ba87b4aea9b26329c961067093d61 (diff)
downloadsamba-fc22f295d06f243c86acc6a9ef042417007677e5.tar.gz
samba-fc22f295d06f243c86acc6a9ef042417007677e5.tar.bz2
samba-fc22f295d06f243c86acc6a9ef042417007677e5.zip
Make sure we can read SACLs from the registry.
Guenther (This used to be commit 62d4cce4562b77403f9353d333b9553352bdf1d8)
-rw-r--r--source3/utils/net_rpc_registry.c6
1 files changed, 5 insertions, 1 deletions
diff --git a/source3/utils/net_rpc_registry.c b/source3/utils/net_rpc_registry.c
index 915ce5f9aa..e1d65fb06b 100644
--- a/source3/utils/net_rpc_registry.c
+++ b/source3/utils/net_rpc_registry.c
@@ -990,6 +990,9 @@ static NTSTATUS rpc_registry_getsd_internal(const DOM_SID *domain_sid,
uint32_t sec_info;
DATA_BLOB blob;
struct security_descriptor sec_desc;
+ uint32_t access_mask = REG_KEY_READ |
+ SEC_RIGHT_MAXIMUM_ALLOWED |
+ SEC_RIGHT_SYSTEM_SECURITY;
if (argc <1 || argc > 2) {
d_printf("Usage: net rpc registry getsd <path> <secinfo>\n");
@@ -997,7 +1000,8 @@ static NTSTATUS rpc_registry_getsd_internal(const DOM_SID *domain_sid,
return NT_STATUS_OK;
}
- status = registry_openkey(mem_ctx, pipe_hnd, argv[0], REG_KEY_READ,
+ status = registry_openkey(mem_ctx, pipe_hnd, argv[0],
+ access_mask,
&pol_hive, &pol_key);
if (!NT_STATUS_IS_OK(status)) {
d_fprintf(stderr, "registry_openkey failed: %s\n",