svn commit: samba r11170 - branches/SAMBA_3_0/packaging/RedHat branches/SAMBA_3_0/source/rpc_server trunk/source/rpc_server

[jerry at samba.org]

Author: jerry
Date: 2005-10-19 02:50:45 +0000 (Wed, 19 Oct 2005)
New Revision: 11170

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11170

Log:
root free pass on eventlog open access check
Modified:
   branches/SAMBA_3_0/packaging/RedHat/samba.spec.tmpl
   branches/SAMBA_3_0/source/rpc_server/srv_eventlog_nt.c
   trunk/source/rpc_server/srv_eventlog_nt.c


Changeset:
Modified: branches/SAMBA_3_0/packaging/RedHat/samba.spec.tmpl
===================================================================
--- branches/SAMBA_3_0/packaging/RedHat/samba.spec.tmpl	2005-10-18 22:50:24 UTC (rev 11169)
+++ branches/SAMBA_3_0/packaging/RedHat/samba.spec.tmpl	2005-10-19 02:50:45 UTC (rev 11170)
@@ -437,6 +437,7 @@
 %{prefix}/bin/smbtree
 %attr(755,root,root) /lib/libnss_wins.s*
 %attr(755,root,root) %{prefix}/lib/samba/vfs/*.so
+%attr(755,root,root) %{prefix}/lib/samba/auth/*.so
 %attr(755,root,root) %{prefix}/lib/samba/charset/*.so
 %attr(755,root,root) %{prefix}/lib/samba/idmap/*.so
 #%attr(755,root,root) %{prefix}/lib/samba/pdb/*.so

Modified: branches/SAMBA_3_0/source/rpc_server/srv_eventlog_nt.c
===================================================================
--- branches/SAMBA_3_0/source/rpc_server/srv_eventlog_nt.c	2005-10-18 22:50:24 UTC (rev 11169)
+++ branches/SAMBA_3_0/source/rpc_server/srv_eventlog_nt.c	2005-10-19 02:50:45 UTC (rev 11170)
@@ -88,6 +88,13 @@
 		return False;
 	}
 	
+	/* root free pass */
+
+	if ( geteuid() == sec_initial_uid() ) {
+		DEBUG(5,("elog_check_access: using root's token\n"));
+		token = get_root_nt_token();
+	}
+
 	/* run the check, try for the max allowed */
 	
 	ret = se_access_check( sec_desc, token, MAXIMUM_ALLOWED_ACCESS,

Modified: trunk/source/rpc_server/srv_eventlog_nt.c
===================================================================
--- trunk/source/rpc_server/srv_eventlog_nt.c	2005-10-18 22:50:24 UTC (rev 11169)
+++ trunk/source/rpc_server/srv_eventlog_nt.c	2005-10-19 02:50:45 UTC (rev 11170)
@@ -88,6 +88,13 @@
 		return False;
 	}
 	
+	/* root free pass */
+
+	if ( geteuid() == sec_initial_uid() ) {
+		DEBUG(5,("elog_check_access: using root's token\n"));
+		token = get_root_nt_token();
+	}
+
 	/* run the check, try for the max allowed */
 	
 	ret = se_access_check( sec_desc, token, MAXIMUM_ALLOWED_ACCESS,