svn commit: samba r10584 - in trunk/source/registry: .

jerry at samba.org jerry at samba.org
Wed Sep 28 16:53:17 GMT 2005


Author: jerry
Date: 2005-09-28 16:53:17 +0000 (Wed, 28 Sep 2005)
New Revision: 10584

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=10584

Log:
use root's token in registry key access check when you are root (free pass check)
Modified:
   trunk/source/registry/reg_frontend.c


Changeset:
Modified: trunk/source/registry/reg_frontend.c
===================================================================
--- trunk/source/registry/reg_frontend.c	2005-09-28 15:15:22 UTC (rev 10583)
+++ trunk/source/registry/reg_frontend.c	2005-09-28 16:53:17 UTC (rev 10584)
@@ -56,14 +56,12 @@
 {
 	NTSTATUS result;
 
-	se_map_generic( &access_desired, &reg_generic_map );
-
 	if ( geteuid() == sec_initial_uid() ) {
-		DEBUG(5,("registry_access_check: access check bypassed for 'root'\n"));
-		*access_granted = access_desired;
-		return NT_STATUS_OK;
+		DEBUG(5,("registry_access_check: using root's token\n"));
+		token = get_root_nt_token();
 	}
 
+	se_map_generic( &access_desired, &reg_generic_map );
 	se_access_check( sec_desc, token, access_desired, access_granted, &result );
 
 	return result;



More information about the samba-cvs mailing list