ACLtorture and code checking tool

Christoph Klein christophk at cip.wiwi.uni-karlsruhe.de
Thu Jun 16 12:30:54 GMT 2005


On Thu, Jun 16, 2005 at 11:20:40AM +1000, Tim Potter wrote:
> On Wed, 2005-06-15 at 13:47 +0200, Christoph Klein wrote:
> > Hi,
> > I've appplied to google's "summer of code" programm, to write a more
> > windowish implementation of acls for samba and linux, with you as my
> > mentoring organisation.
> > I already started coding with dome minor results and in order to be
> > continue i have 2 questions?
> > Is there a tool avaible that does stress tests on smb servers including
> > setting, altering, removing ACLs and that checks if these are properly
> > enforced? Can smbtortute do that?
> > I think i've raed somewehre on this list, that samba uses some tool to
> > check source code automatically to enhance code quality. Is this the
> > case and where can i get this tool?
> 
> The smbtorture program in Samba 4 has a test called RAW-ACLS which you
> might like to look at.  It doesn't really hammer them very hard, but
> does create a whole bunch of different ACLs and tests whether they work
> as expected.
> 
> Take a look in source/torture/raw/acls.c for the gory details.

Thank you! The first run wasnt very successfull. Seems like i have to
implement DENY ACEs too to compete better in the test. 
Do modern Winodwsversions (2k+) use SEC_ACE_FLAG_NO_PROPAGATE_INHERIT? AFAIK its not changeable within the Wndows XP ACL-Editor?!

christoph
> 
> 
> Tim.


More information about the samba-technical mailing list