summaryrefslogtreecommitdiff
path: root/source3/lib/util_sec.c
AgeCommit message (Collapse)AuthorFilesLines
2003-10-23Merge from 3_0:Volker Lendecke1-5/+2
After a phonecall with jra finally commit this. This changes our behaviour when the setresuid call is available. We now not only change the effective uid but also the real uid when becoming unprivileged. This is mainly for improved AFS compatibility, as AFS selects the token to send to the server based on the real uid of the process. I tested this with a W2k server with two non-root 'runas' sessions. They come in via a single smbd as two different users using two session setups. Samba on Linux can still switch between the two uids, proved by two different files created via those sessions. Volker (This used to be commit 8a75e2dfb6ee9099e7f9a970c522e71ab144d919)
2003-09-24* sync more files from 3.0Gerald Carter1-0/+4
* set version string to "CVS 3.1.0alpha1" (This used to be commit c6a61ffcbd0c95afd94bd33fd832b24bc8209de5)
2002-07-15fixed a problem with getgroups() where it could include our currentAndrew Tridgell1-0/+36
effective gid which could mean that the user gets group 0 in their group list for acl interpretation this is a replacement fix for the one richard did in 2.2 (which didn't cope wiith variable behaviour depending on which nss module was in use) (This used to be commit cfc5ca3416cea5ea5d2ac34f5521cb6367e42cd2)
2002-03-24Spelling fixes.Tim Potter1-1/+1
(This used to be commit a5ac2ac4ada48ee3be061a32ba40bd8c4b3b3865)
2002-02-18reverted tims patch that broke configureAndrew Tridgell1-13/+0
why does anything but smbd care about sec_init() anyway?? (This used to be commit 569505b77140c2688aeab4df058b864464f23c1d)
2002-02-17Whoops, typo.Tim Potter1-4/+4
(This used to be commit e7abb79fb304b34aeb369dc6deafa96dfd1e02f3)
2002-02-17Do a smb_panic() if sec_initial_[ug]id() or non_root_mode() is calledTim Potter1-0/+13
without before sec_init(). This should avoid the formation of another magic function club. (-: (This used to be commit 1b941e2c637e41049932945607149094342359c5)
2002-01-30Removed version number from file header.Tim Potter1-2/+1
Changed "SMB/Netbios" to "SMB/CIFS" in file header. (This used to be commit 6a58c9bd06d0d7502a24bf5ce5a2faf0a146edfa)
2001-10-31Parionia to ensure people don't install libsmb based programs setuid root.Andrew Bartlett1-0/+8
libsmb has not been written to be setuid, with things like LIBSMB_PROG allowing all sort of fun and games. Andrew Bartlett (This used to be commit 0c8e9339d8238de92e9146d04091694b62874c33)
2001-10-02Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.Tim Potter1-1/+0
(This used to be commit 2d0922b0eabfdc0aaf1d0797482fef47ed7fde8e)
2001-09-15Restore the profiling data shmem parinoia. This whole area needs to beAndrew Bartlett1-0/+10
fixed - an mmaped file or the like would be a good idea. (This used to be commit bc1385fc5e55eeed626615fad92877296064a27e)
2001-07-08added sec_initial_uid() function so we can ask if a file is owned byAndrew Tridgell1-0/+8
the initial uid (This used to be commit 9449544428c9c3153f9e757c57bccda382fa2882)
2001-07-06fixed inetd operation as non-rootAndrew Tridgell1-4/+0
(This used to be commit 9a9da44455fc35cb9b1625ffefd12a9c5fe48d6b)
2001-06-25make sure we have BOOL in autoconf usage of util_sec.cAndrew Tridgell1-0/+1
(This used to be commit 72f63f5144ececdef31c659ab645eb71a88943b5)
2001-06-25- make the regresison test mode code build in by default. This shouldAndrew Tridgell1-15/+40
allow us to have test targets without special configure options - fixed make proto so that it actually does something (This used to be commit 55109a752578e9389d853cb27ec17c2114ecff77)
2001-06-22added the ability to test smbd safely as an ordinary user. The way it works isAndrew Tridgell1-0/+4
that libsmb/ creates a local tcp socket then launches smbd as a subprocess attached to that socket. smbd thinks it is being launched from inetd. to use it do the following: - compile with -DSMB_REGRESSION_TEST - run like this (also works with smbtorture etc) export SMBD_TEST=1 export LIBSMB_PROG=bin/smbd smbclient //server/share -Uuser%pass obviously you need to setup a smb.conf etc. Using --prefix to configure is useful. The aim of all this stuff is to add a decent set of regression tests to the build farm, so we know if smbd actually runs correctly on all the platforms, not just builds. We can run smbtorture, masktest, locktest etc, plus a bunch of smbclient scripts and any new tests we write. This doesn't help much with nmbd (at least not yet) but its a good start. (This used to be commit 7e8e6ae9a88c4d2587eb4e7f0501cd71bd36ebb2)
2000-12-06Fixed compiler warning.Tim Potter1-1/+1
(This used to be commit 6553f1d02792d81987dda51af76b4fc06d73a787)
2000-02-08Moved over lib/util_sec (with added fixes) as the HEAD sourceJeremy Allison1-4/+50
seems to have drifted a little. Jeremy. (This used to be commit ebcdb4afee04cc3b94e60b1de86c2b534d4e233e)
1999-12-17util_sec.c from 2.0.6Andrew Tridgell1-0/+326
(This used to be commit 955d187139365d16f3fca1abd3853ca4e49f244c)