Attachment 4501 Details for Bug 6504 – 3.3.x patch that fixes various NT_STATUS_ACCESS_DENIED errors

[patch] 3.3.x patch that fixes various NT_STATUS_ACCESS_DENIED errors

3.3-samr-access-fix.patch (text/plain), 995 bytes, created by Guenther Deschner on 2009-08-03 09:36:38 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Guenther Deschner

Created: 2009-08-03 09:36:38 UTC

Size: 995 bytes

patch

obsolete

>From 201725e871f40b9e3d3e8530251f0caee51cac43 Mon Sep 17 00:00:00 2001
>From: Jeremy Allison <jra@samba.org>
>Date: Mon, 18 May 2009 14:26:37 -0700
>Subject: [PATCH] Fix SAMR server for winbindd access. Ensure we allow MAX_ACCESS to be mapped to what we're giving Everyone. Jeremy.
>
>---
> source/rpc_server/srv_samr_nt.c |    4 ++--
> 1 files changed, 2 insertions(+), 2 deletions(-)
>
>diff --git a/source/rpc_server/srv_samr_nt.c b/source/rpc_server/srv_samr_nt.c
>index c3464a8..7dc81dd 100644
>--- a/source/rpc_server/srv_samr_nt.c
>+++ b/source/rpc_server/srv_samr_nt.c
>@@ -261,8 +261,8 @@ static void map_max_allowed_access(const NT_USER_TOKEN *token,
> 	}
> 	*pacc_requested &= ~MAXIMUM_ALLOWED_ACCESS;
> 
>-	/* At least try for generic read. */
>-	*pacc_requested = GENERIC_READ_ACCESS;
>+	/* At least try for generic read|execute - Everyone gets that. */
>+	*pacc_requested = GENERIC_READ_ACCESS|GENERIC_EXECUTE_ACCESS;
> 
> 	/* root gets anything. */
> 	if (geteuid() == sec_initial_uid()) {
>-- 
>1.6.2.5
>

Flags:

vl: review+
gd: review? (jra)

Actions: View

Attachments on bug 6504: 4352 | 4353 | 4354 | 4355 | 4356 | 4501