diff options
| author | Andreas Schneider <asn@samba.org> | 2012-06-29 17:59:17 +0200 |
|---|---|---|
| committer | Andreas Schneider <asn@cryptomilk.org> | 2012-07-06 10:00:58 +0200 |
| commit | 1744e99d0a339824a4e73038dccd673920f0c7bb (patch) | |
| tree | 4301f987575cd03f287f5d6ac9191ac48158f9ad /source4/rpc_server/lsa/lsa_init.c | |
| parent | 997c780d24d8f59890ffe92c26107ff4f544a038 (diff) | |
| download | samba-1744e99d0a339824a4e73038dccd673920f0c7bb.tar.gz samba-1744e99d0a339824a4e73038dccd673920f0c7bb.tar.bz2 samba-1744e99d0a339824a4e73038dccd673920f0c7bb.zip | |
s4-lsarpc: DCERPC_FAULT_ACCESS_DENIED for np
Diffstat (limited to 'source4/rpc_server/lsa/lsa_init.c')
| -rw-r--r-- | source4/rpc_server/lsa/lsa_init.c | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/source4/rpc_server/lsa/lsa_init.c b/source4/rpc_server/lsa/lsa_init.c index 9b95374c05..bee6556dfc 100644 --- a/source4/rpc_server/lsa/lsa_init.c +++ b/source4/rpc_server/lsa/lsa_init.c @@ -154,10 +154,15 @@ NTSTATUS dcesrv_lsa_get_policy_state(struct dcesrv_call_state *dce_call, TALLOC_ NTSTATUS dcesrv_lsa_OpenPolicy2(struct dcesrv_call_state *dce_call, TALLOC_CTX *mem_ctx, struct lsa_OpenPolicy2 *r) { + enum dcerpc_transport_t transport = dce_call->conn->endpoint->ep_description->transport; NTSTATUS status; struct lsa_policy_state *state; struct dcesrv_handle *handle; + if (transport != NCACN_NP && transport != NCALRPC) { + DCESRV_FAULT(DCERPC_FAULT_ACCESS_DENIED); + } + ZERO_STRUCTP(r->out.handle); if (r->in.attr != NULL && @@ -198,8 +203,13 @@ NTSTATUS dcesrv_lsa_OpenPolicy2(struct dcesrv_call_state *dce_call, TALLOC_CTX * NTSTATUS dcesrv_lsa_OpenPolicy(struct dcesrv_call_state *dce_call, TALLOC_CTX *mem_ctx, struct lsa_OpenPolicy *r) { + enum dcerpc_transport_t transport = dce_call->conn->endpoint->ep_description->transport; struct lsa_OpenPolicy2 r2; + if (transport != NCACN_NP && transport != NCALRPC) { + DCESRV_FAULT(DCERPC_FAULT_ACCESS_DENIED); + } + r2.in.system_name = NULL; r2.in.attr = r->in.attr; r2.in.access_mask = r->in.access_mask; |