From c5cf47443985c34ad32c44c322901e0fc3a065d7 Mon Sep 17 00:00:00 2001
From: Andrew Tridgell <tridge@samba.org>
Date: Mon, 3 Nov 2003 06:22:45 +0000
Subject: a major revamp of the low level dcerpc code in samba4, We can now do
 a successful LSA OpenPolicy using smbtorture (This used to be commit
 e925c315f55905060fcca1b188ae1f7e40baf514)

---
 source4/libcli/ndr/ndr_sec.h | 90 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 90 insertions(+)
 create mode 100644 source4/libcli/ndr/ndr_sec.h

(limited to 'source4/libcli/ndr/ndr_sec.h')

diff --git a/source4/libcli/ndr/ndr_sec.h b/source4/libcli/ndr/ndr_sec.h
new file mode 100644
index 0000000000..0c9d542006
--- /dev/null
+++ b/source4/libcli/ndr/ndr_sec.h
@@ -0,0 +1,90 @@
+/* 
+   Unix SMB/CIFS implementation.
+
+   definitions for marshalling/unmarshalling security descriptors
+   and related structures
+
+   Copyright (C) Andrew Tridgell 2003
+   
+   This program is free software; you can redistribute it and/or modify
+   it under the terms of the GNU General Public License as published by
+   the Free Software Foundation; either version 2 of the License, or
+   (at your option) any later version.
+   
+   This program is distributed in the hope that it will be useful,
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+   GNU General Public License for more details.
+   
+   You should have received a copy of the GNU General Public License
+   along with this program; if not, write to the Free Software
+   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+*/
+
+
+/* a domain SID. Note that unlike Samba3 this contains a pointer,
+   so you can't copy them using assignment */
+struct dom_sid {
+	uint8  sid_rev_num;             /**< SID revision number */
+	uint8  num_auths;               /**< Number of sub-authorities */
+	uint8  id_auth[6];              /**< Identifier Authority */
+	uint32 *sub_auths;
+};
+
+/* an access control element */
+struct security_ace {
+	uint8 type;  /* xxxx_xxxx_ACE_TYPE - e.g allowed / denied etc */
+	uint8 flags; /* xxxx_INHERIT_xxxx - e.g OBJECT_INHERIT_ACE */
+
+	uint32 access_mask;
+
+	/* the 'obj' part is present when type is XXXX_TYPE_XXXX_OBJECT */
+	struct {
+		uint32 flags;
+		GUID object_guid;
+		GUID inherit_guid;
+	} *obj;
+
+	struct dom_sid trustee;
+};
+
+
+/* a security ACL */
+struct security_acl {
+	uint16 revision;
+	uint32 num_aces;
+
+	struct security_ace *aces;
+};
+
+
+/* a security descriptor */
+struct security_descriptor {
+	uint8 revision;
+	uint16 type;     /* SEC_DESC_xxxx flags */
+
+	struct dom_sid *owner_sid; 
+	struct dom_sid *group_sid;
+	struct security_acl *sacl; /* system ACL */
+	struct security_acl *dacl; /* user (discretionary) ACL */
+};
+
+/* query security descriptor */
+struct smb_query_secdesc {
+	struct {
+		uint16 fnum;
+		uint32 secinfo_flags;
+	} in;
+	struct {
+		struct security_descriptor *sd;
+	} out;
+};
+
+/* set security descriptor */
+struct smb_set_secdesc {
+	struct {
+		uint16 fnum;
+		uint32 secinfo_flags;
+		struct security_descriptor *sd;
+	} in;
+};
-- 
cgit