summaryrefslogtreecommitdiff
path: root/source4/utils/getntacl.c
diff options
context:
space:
mode:
authorAndrew Tridgell <tridge@samba.org>2005-01-17 04:07:33 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 13:08:56 -0500
commit4d7e4c80580f9902339680cecee457460fe85218 (patch)
treef0f952e0ea3d8225aefcca97f11190844616abf6 /source4/utils/getntacl.c
parent6717dcca765e5286a36d89eebc5da2d167bcbef2 (diff)
downloadsamba-4d7e4c80580f9902339680cecee457460fe85218.tar.gz
samba-4d7e4c80580f9902339680cecee457460fe85218.tar.bz2
samba-4d7e4c80580f9902339680cecee457460fe85218.zip
r4794: - disabled the ntacl command line utilities until they are rewritten to use the same
acl format as we use in pvfs (and hopefully use common code too) - removed a lot of old cruft from our autoconf tests. This may well break some builds, but then we can fix them properly instead of the "if solaris version 5.1.2" crap This was prompted by someone sending me solaris 10 patches that patched the configure script with if statements for several more versions of solaris to check for and do special stuff. That is just silly. (This used to be commit 1ea59d1146f041e9befbb435e901c6d7d497c52c)
Diffstat (limited to 'source4/utils/getntacl.c')
-rw-r--r--source4/utils/getntacl.c102
1 files changed, 1 insertions, 101 deletions
diff --git a/source4/utils/getntacl.c b/source4/utils/getntacl.c
index 762167a93a..87cc280fcc 100644
--- a/source4/utils/getntacl.c
+++ b/source4/utils/getntacl.c
@@ -23,108 +23,8 @@
#include "includes.h"
#include "system/filesys.h"
-#if (defined(HAVE_NO_ACLS) || !defined(HAVE_XATTR_SUPPORT))
-
int main(int argc, char **argv)
{
- printf("ACL support not compiled in.");
+ printf("This utility disabled until rewritten\n");
return 1;
}
-
-#else
-
-/* Display a security descriptor in "psec" format which is as follows.
-
- The first two lines describe the owner user and owner group of the
- object. If either of these lines are blank then the respective
- owner property is not set. The remaining lines list the individual
- permissions or ACE entries, one per line. Each column describes a
- different property of the ACE:
-
- Column Description
- -------------------------------------------------------------------
- 1 ACE type (allow/deny etc)
- 2 ACE flags
- 3 ACE mask
- 4 SID the ACE applies to
-
- Example:
-
- S-1-5-21-1067277791-1719175008-3000797951-500
-
- 1 9 0x10000000 S-1-5-21-1067277791-1719175008-3000797951-501
- 1 2 0x10000000 S-1-5-21-1067277791-1719175008-3000797951-501
- 0 9 0x10000000 S-1-5-21-1067277791-1719175008-3000797951-500
- 0 2 0x10000000 S-1-5-21-1067277791-1719175008-3000797951-500
- 0 9 0x10000000 S-1-5-21-1067277791-1719175008-3000797951-513
- 0 2 0x00020000 S-1-5-21-1067277791-1719175008-3000797951-513
- 0 2 0xe0000000 S-1-1-0
-*/
-
-static void print_psec(TALLOC_CTX *mem_ctx, struct security_descriptor *sd)
-{
- if (sd->owner_sid)
- printf("%s\n", dom_sid_string(mem_ctx, sd->owner_sid));
- else
- printf("\n");
-
- if (sd->group_sid)
- printf("%s\n", dom_sid_string(mem_ctx, sd->owner_sid));
- else
- printf("\n");
-
- /* Note: SACL not displayed */
-
- if (sd->dacl) {
- int i;
-
- for (i = 0; i < sd->dacl->num_aces; i++) {
- struct security_ace *ace = &sd->dacl->aces[i];
-
- printf("%d %d 0x%08x %s\n", ace->type, ace->flags,
- ace->access_mask,
- dom_sid_string(mem_ctx, &ace->trustee));
- }
-
- }
-}
-
-int main(int argc, char **argv)
-{
- TALLOC_CTX *mem_ctx;
- ssize_t size;
- char *data;
- struct security_descriptor sd;
- DATA_BLOB blob;
- struct ndr_pull *ndr;
- NTSTATUS result;
-
- static_init_getntacl;
-
- mem_ctx = talloc_init("getntacl");
-
- /* Fetch ACL data */
-
- size = getxattr(argv[1], "security.ntacl", NULL, 0);
-
- if (size == -1) {
- fprintf(stderr, "%s: %s\n", argv[1], strerror(errno));
- exit(1);
- }
-
- data = talloc_size(mem_ctx, size);
-
- size = getxattr(argv[1], "security.ntacl", data, size);
-
- blob = data_blob_talloc(mem_ctx, data, size);
-
- ndr = ndr_pull_init_blob(&blob, mem_ctx);
-
- result = ndr_pull_security_descriptor(
- ndr, NDR_SCALARS|NDR_BUFFERS, &sd);
-
- print_psec(data, &sd);
- return 0;
-}
-
-#endif /* HAVE_NO_ACLS */