ACL check in elog_check_access?

[Volker Lendecke]

On Wed, Jun 18, 2008 at 09:22:48AM -0500, Gerald (Jerry) Carter wrote:
> A client may have multiple open handles and in some cases
> multiple users may open the event log so opening as root and
> maintaining a ref count was the only way I could thing of to
> service multiple access lvls concurrently in the same process.

Hmmm. Okay. How about the following: Open the tdb file using
open(2) as normal user and then as needed open the tdb file
using tdb_open as root if the open(2) succeeded on demand.
If anyone closes the handle you would have to tdb_close the
root-opened tdb file as well because fcntl locks would be
lost. But an on-demand re-open would solve this.

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20080618/f7b0b94b/attachment.bin