samba - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author	Files	Lines
2007-10-10	r4448: - fixed access_mask checking on acl set	Andrew Tridgell	1	-2/+36
	- honor the change ownership requests of acl set, changing the underlying unix owner/group - fix the access mask on file create with SEC_FLAG_MAXIMUM_ALLOWED (This used to be commit 5761fa35ab727b51ef1b52459911bafbdd788755)
2007-10-10	r4412: SEC_FILE_READ_ATTRIBUTE is always granted, even if not requested. ↵	Andrew Tridgell	1	-0/+2
	This was being done in the full ACL code, but not in the unix access check code, which meant that qfileinfo was failing for some parameters (This used to be commit 96d017e521f5a996a7a274682838855d077834bc)
2007-10-10	r4411: when checking for create permissions, we need to check the parent, ↵	Andrew Tridgell	1	-1/+1
	not the child! (This used to be commit 30b4c20b1c9aea94dd2a0611b58860797d244e5a)
2007-10-10	r4408: added the remaining access check hooks into pvfs. All calls should ↵	Andrew Tridgell	1	-0/+21
	now have acl checking, and obey the various inheritance rules. (This used to be commit 5fe51807d6b97e68b65f152c0f405e5c5a025d21)
2007-10-10	r4403: - added ACL inheritance in the pvfs backend. ACLs are now inherited on	Andrew Tridgell	1	-1/+163
	file and directory creation via ntcreatex. pvfs now passes the inheritance test in RAW-ACLS - cleaned up the error handling a bit in pvfs_open() (This used to be commit f4dfb63d5395a365961a21388639809fcd3112d0)
2007-10-10	r4391: bring the default ACL inline with what w2k3 uses	Andrew Tridgell	1	-72/+37
	(This used to be commit 16967f7502ea6d2efa0fc08decc955a1516c3a02)
2007-10-10	r4314: added ACL checking on unlink	Andrew Tridgell	1	-0/+13
	(This used to be commit f25c469693517ed993e0379d8b07cd7eb235a669)
2007-10-10	r4205: fixed the default acl mapping from posix permissions to use the mapped	Andrew Tridgell	1	-33/+33
	uid->sid and gid->sid (This used to be commit 590e1a91bfc719c2d84a9a066fb4e0308b6d9803)
2007-10-10	r4147: converted from NT_USER_TOKEN to struct security_token	Andrew Tridgell	1	-1/+1
	this is mostly just a tidyup, but also adds the privilege_mask, which I will be using shortly in ACL checking. note that I had to move the definition of struct security_token out of security.idl as pidl doesn't yet handle arrays of pointers, and the usual workaround (to use a intermediate structure) would make things too cumbersome for this structure, especially given we never encode it to NDR. (This used to be commit 7b446af09b8050746bfc2c50e9d56aa94397cc1a)
2007-10-10	r4056: modified the access check code based on results from RAW-ACLS	Andrew Tridgell	1	-0/+41
	test. Also added generic mapping bits for pvfs. We don't pass RAW-ACLS yet, but its close. (This used to be commit c7cbd966d49a5345ea326732587555d209c531fc)
2007-10-10	r4035: more effort on consistent naming of the access mask bits.	Andrew Tridgell	1	-1/+1
	This removes the duplicate named SEC_RIGHTS_MAXIMUM_ALLOWED and SEC_RIGHTS_FULL_CONTROL, which are just other names for SEC_FLAG_MAXIMUM_ALLOWED and SEC_RIGHTS_FILE_ALL. The latter names match the new naming conventions in security.idl Also added names for the generic->specific mappings for files are directories (This used to be commit 17a4e0b3aca227b40957ed1e0c57e498debc6ddf)
2007-10-10	r4026: added NT ACL checking on pvfs_open() for existing files. I need to	Andrew Tridgell	1	-2/+78
	work out some way to do a decent test suite for this. (This used to be commit 9a9a0d0e791e4b64f0a35c921729e623b977af47)
2007-10-10	r4011: get rid of rpc_secdes.h and replace it with a single sane set of	Andrew Tridgell	1	-40/+40
	definitions for security access masks, in security.idl The previous definitions were inconsistently named, and contained many duplicate and misleading entries. I kept finding myself tripping up while using them. (This used to be commit 01c0fa722f80ceeb3f81f01987de95f365a2ed3d)
2007-10-10	r3995: improved the default ACL mapping from unix perms	Andrew Tridgell	1	-7/+11
	(This used to be commit 01e89697fe837ee76fedda149e1e2b389a7d3889)
2007-10-10	r3990: take advantage of the uid->sid and gid->sid code to create a much	Andrew Tridgell	1	-14/+91
	better default NT ACL in pvfs (This used to be commit 9ff6ecbdb6c08528193f7958d7ea7d9a8df6defd)
2007-10-10	r3836: - fixed the handling of NT_STATUS_BUFFER_TOO_SMALL in nttrans server	Andrew Tridgell	1	-0/+1
	- fixed revision number on default DACL - fixed DACL_PRESENT bit in acl query with these fixes cacls.exe and the GUI ACL editor in w2k both work against pvfs. The GUI editor is slow as it times out looking up the SID -> name mappings. (This used to be commit 4468018cb63fd884920c2b0f5235bded50c6b5db)
2007-10-10	r3833: NTACL is a better xattr name than DosAcl (tpot suggested this)	Andrew Tridgell	1	-5/+5
	(This used to be commit 17911eea5995c12a2300dd3928612c77f8f0883e)
2007-10-10	r3832: added NT ACL query/set to the posix NTVFS backend. The default ACL is	Andrew Tridgell	1	-0/+193
	based on the current nttoken, which is completely wrong, but works as a start. The ACL is stored in the xattr system.DosAcl, using a NDR encoded IDL union with a version number to allow for future expansion. pvfs does not yet check the ACL for file access. At the moment the ACL is just query/set. We also need to do some RPC work to allow the windows ACL editor to be used. At the moment is queries the ACL fine, but displays an error when it fails to map the SIDs via rpc. (This used to be commit 3a1f20d874ab2d8b2a2f2485b7a705847abf1263)