[SCM] Samba Shared Repository - branch master updated

Jeremy Allison jra at samba.org
Sat Feb 23 11:29:02 MST 2013


The branch, master has been updated
       via  3e5acc1 Fix bug #9674 - Samba denies owner Read Control when there is a DENY entry while W2K08 does not.
      from  36da56e Make systemctl reference indirect in packaging/NetworkManager/30-winbind-systemd

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -----------------------------------------------------------------
commit 3e5acc155bb7be5c531a4a35b16e040f71f628ac
Author: Richard Sharpe <rsharpe at samba.org>
Date:   Sat Feb 23 08:41:27 2013 -0800

    Fix bug #9674 - Samba denies owner Read Control when there is a DENY entry while W2K08 does not.
    
    Signed-off-by: Richard Sharpe <rsharpe at samba.org>
    Reviewed-by: Jeremy Allison <jra at samba.org>
    
    Autobuild-User(master): Jeremy Allison <jra at samba.org>
    Autobuild-Date(master): Sat Feb 23 19:28:15 CET 2013 on sn-devel-104

-----------------------------------------------------------------------

Summary of changes:
 libcli/security/access_check.c |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/libcli/security/access_check.c b/libcli/security/access_check.c
index 936ffca..2425e8a 100644
--- a/libcli/security/access_check.c
+++ b/libcli/security/access_check.c
@@ -243,6 +243,9 @@ NTSTATUS se_access_check(const struct security_descriptor *sd,
 		}
 	}
 
+	/* Explicitly denied bits always override */
+	bits_remaining |= explicitly_denied_bits;
+
 	/* The owner always gets owner rights as defined above. */
 	if (security_token_has_sid(token, sd->owner_sid)) {
 		if (owner_rights_default) {
@@ -258,9 +261,6 @@ NTSTATUS se_access_check(const struct security_descriptor *sd,
 		}
 	}
 
-	/* Explicitly denied bits always override */
-	bits_remaining |= explicitly_denied_bits;
-
 	/*
 	 * We check privileges here because they override even DENY entries.
 	 */


-- 
Samba Shared Repository


More information about the samba-cvs mailing list