diff options
Diffstat (limited to 'libcli')
| -rw-r--r-- | libcli/security/pysecurity.c | 83 | ||||
| -rw-r--r-- | libcli/security/wscript_build | 6 |
2 files changed, 89 insertions, 0 deletions
diff --git a/libcli/security/pysecurity.c b/libcli/security/pysecurity.c new file mode 100644 index 0000000000..56bdd69b4c --- /dev/null +++ b/libcli/security/pysecurity.c @@ -0,0 +1,83 @@ +/* + Unix SMB/CIFS implementation. + Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007-2008 + Copyright (C) Andrew Bartlett <abartlet@samba.org> 2011 + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see <http://www.gnu.org/licenses/>. +*/ + +#include <Python.h> +#include "includes.h" +#include "libcli/util/pyerrors.h" +#include "libcli/security/security.h" +#include "pytalloc.h" + +static PyObject *py_se_access_check(PyObject *module, PyObject *args, PyObject *kwargs) +{ + NTSTATUS nt_status; + const char * const kwnames[] = { "security_descriptor", "token", "access_desired", NULL }; + PyObject *py_sec_desc = Py_None; + PyObject *py_security_token = Py_None; + struct security_descriptor *security_descriptor; + struct security_token *security_token; + int access_desired; /* This is an int, because that's what + * we need for the python + * PyArg_ParseTupleAndKeywords */ + uint32_t access_granted; + + if (!PyArg_ParseTupleAndKeywords(args, kwargs, "OOi", + discard_const_p(char *, kwnames), + &py_sec_desc, &py_security_token, &access_desired)) { + return NULL; + } + + security_descriptor = py_talloc_get_type(py_sec_desc, struct security_descriptor); + if (!security_descriptor) { + PyErr_Format(PyExc_TypeError, + "Expected dcerpc.security.descriptor for security_descriptor argument got %s", + talloc_get_name(py_talloc_get_ptr(py_sec_desc))); + return NULL; + } + + security_token = py_talloc_get_type(py_security_token, struct security_token); + if (!security_token) { + PyErr_Format(PyExc_TypeError, + "Expected dcerpc.security.token for token argument, got %s", + talloc_get_name(py_talloc_get_ptr(py_security_token))); + return NULL; + } + + nt_status = se_access_check(security_descriptor, security_token, access_desired, &access_granted); + if (!NT_STATUS_IS_OK(nt_status)) { + PyErr_NTSTATUS_IS_ERR_RAISE(nt_status); + } + + return PyLong_FromLong(access_granted); +} + +static PyMethodDef py_security_methods[] = { + { "access_check", (PyCFunction)py_se_access_check, METH_VARARGS|METH_KEYWORDS, + "access_check(security_descriptor, token, access_desired) -> access_granted. Raises NT_STATUS on error, including on access check failure, returns access granted bitmask"}, + { NULL }, +}; + +void initsecurity(void) +{ + PyObject *m; + + m = Py_InitModule3("security", py_security_methods, + "Security support."); + if (m == NULL) + return; +} diff --git a/libcli/security/wscript_build b/libcli/security/wscript_build index 4b3f46ebcf..ca60a44a4c 100644 --- a/libcli/security/wscript_build +++ b/libcli/security/wscript_build @@ -7,3 +7,9 @@ bld.SAMBA_LIBRARY('security', deps='talloc ndr NDR_SECURITY' ) +if getattr(bld.env, '_SAMBA_BUILD_', 0) == 4: + bld.SAMBA_PYTHON('pysecurity', + source='pysecurity.c', + deps='security', + realname='samba/security.so' + ) |