summaryrefslogtreecommitdiff
path: root/libcli/security
AgeCommit message (Collapse)AuthorFilesLines
2010-09-11libcli/security Improve dump of privileges: Just walk the tableAndrew Bartlett1-5/+4
This removes some logic recently added that was just too smart - it is easier to just walk the table and do a bit match here. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Remove pointer indirection from se_priv_to_privilege_set()Andrew Bartlett2-3/+3
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security Don't export privs[] as a global variableAndrew Bartlett2-41/+27
Instead, provide access functions for the LSA and net sam callers for the information they need. They still only enumerate the first 8 privileges that have traditionally been exposed. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security Merge privilege lists from source3 and source4Andrew Bartlett1-169/+126
The LSA enumeration in source3 will not show the new privileges, but otherwise, they are now in common, and can be set by name. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security Return number of entries in the old source3 listAndrew Bartlett1-3/+4
This ensures there isn't a behaviour change when the source3 list is combined with the longer source4 list. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/privileges Simplify get_privilege_luid() to return just the enumAndrew Bartlett2-9/+4
As Samba only deals with the lower 32 bits of the LUID, just return those and let the LSA layer deal with the upper 0 bits. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security Don't memcpy a uint64_t value, just assign it.Andrew Bartlett1-1/+1
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security Use ARRAY_SIZE() consistantly.Andrew Bartlett1-15/+16
This avoids the use of SE_END, and has all callers walking the array using the same termination condition. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security Fix and clarify privilege manipulation function commentsAndrew Bartlett1-9/+9
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security Make the two privileges tables share a common struct definitionAndrew Bartlett2-27/+22
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security Move source4/ privileges code into the common libcli/securityAndrew Bartlett3-4/+331
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Move manual prototypes to common privileges.hAndrew Bartlett1-0/+88
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Inline dump_se_priv into callers now that it's just a uint64_tAndrew Bartlett1-9/+0
The previous 128 bit structure needed this helper function. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security Use talloc_realloc() not TALLOC_REALLOC_ARRAY()Andrew Bartlett1-1/+1
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security Use C99 typesAndrew Bartlett1-3/+3
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security Use true and false, not True and FalseAndrew Bartlett1-22/+22
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Move source3/ privileges implmentation into commonAndrew Bartlett2-0/+531
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-06-21s3/s4 - remove "talloc_tos()" from common code since s4 doesn't support itMatthias Dieter Wallnöfer1-4/+9
Please don't use this in common code parts until we change the policy regarding it.
2010-06-19libcli: Fixed a segfault in security_acl_dup when the acl is NULL.Brendan Powers1-0/+4
This can happen when duplicating a security descriptor that is missing either sacls or dacls. Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
2010-05-18Finish removal of iconv_convenience in public API's.Jelmer Vernooij1-2/+2
2010-04-06s4-waf: removed the AUTOGENERATED markersAndrew Tridgell1-3/+0
we won't be using the mk -> wscript generator again
2010-04-06s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵Andrew Tridgell1-0/+2
them
2010-04-06build: waf quicktest nearly worksAndrew Tridgell1-1/+1
Rewrote wafsamba using a new dependency handling system, and started adding the waf test code
2010-04-06build: commit all the waf build files in the treeAndrew Tridgell1-0/+9
2010-03-28Attempt to fix the build on AIX, that system seems to have a #define for s_typeVolker Lendecke1-18/+35
2010-03-03libcli/security: fix sddl.c to be able to build it from source3Michael Adam1-1/+1
2010-03-03s4:move the sddl code down to the top levelMichael Adam3-1/+659
Michael
2010-02-14lib: use TYPESAFE_QSORT() in lib/ and libcli/Andrew Tridgell1-5/+4
2010-02-02Change uint_t to unsigned int in libcliMatt Kraai1-1/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-01-25Revert "libcli/security: Remove a call to strncasecmp"Volker Lendecke1-1/+5
This reverts commit 7c687665eaf16b0c6f83c130f6d9e5459e0b2a32.
2010-01-25Revert "libcli/security: Convert some strtol calls to strtoul"Volker Lendecke1-2/+2
This reverts commit 7fe66e06c4df575c410d4d70ff38f120c2f4363b.
2010-01-25Revert "libcli/security: Fix a valgrind error in dom_sid_parse"Volker Lendecke1-4/+0
This reverts commit f1c889a4e61d6d751cbabd8014b4345b8051b97c.
2010-01-25Revert "libcli/security: Prohibit SID formats like S-1-5-32-+545"Volker Lendecke1-13/+0
This reverts commit 1fbeae41655b8305834f2149b1268077eba8633d. Apparently this breaks the build of Samba4
2010-01-23libcli/security: Prohibit SID formats like S-1-5-32-+545Volker Lendecke1-0/+13
2010-01-23libcli/security: Fix a valgrind error in dom_sid_parseVolker Lendecke1-0/+4
2010-01-23libcli/security: Convert some strtol calls to strtoulVolker Lendecke1-2/+2
This tightens the dom_sid_parse syntax check a bit: "--" would have been allowed in sid string
2010-01-23libcli/security: Remove a call to strncasecmpVolker Lendecke1-5/+1
2009-09-20Initial implementation of security descriptor creation in DSNadezhda Ivanova2-0/+54
TODO's: ACE sorting and clarifying the inheritance of object specific ace's.
2009-09-16Owner and group defaulting.Nadezhda Ivanova2-1/+4
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-07-14Create a correct talloc hierarchy in make_sec_acl()Volker Lendecke1-1/+1
2009-06-19A fix in the ACL code used by both SAMBA 3 and 4Matthias Dieter Wallnöfer1-1/+1
This fixes an uninitialised structure. It has been found through valgrind in the RAW-ACLs test suite (Bug #6397).
2009-04-21Fix includes for security_descriptor file for the non-merged build.Jelmer Vernooij1-1/+2
2009-04-21Move the security_descriptor utility code to the top-level.Jelmer Vernooij3-1/+598
2009-03-25display_sec: Move to common libcli/security directory.Jelmer Vernooij2-1/+323
2009-03-02libcli/security: fix the source4 buildStefan Metzmacher1-0/+1
metze
2009-03-02libcli/security: fix the source3 buildStefan Metzmacher2-2/+2
metze
2009-03-01Add header files for secace and secacl.Jelmer Vernooij2-0/+72
2009-03-01Move secacl to top-level.Jelmer Vernooij1-0/+122
2009-03-01dom_sid.h: Include dependency security.h that provides the dom_sid struct.Jelmer Vernooij1-0/+2
2009-03-01Move secace.c to top-level.Jelmer Vernooij1-0/+281