Attachment 7338 Details for Bug 8768 – git-am fix for 3.6.next

[patch] git-am fix for 3.6.next

0001-Honor-SeTakeOwnershiPrivilege-when-client-asks-for-S.patch (text/plain), 1.21 KB, created by Jeremy Allison on 2012-02-22 22:38:24 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jeremy Allison

Created: 2012-02-22 22:38:24 UTC

Size: 1.21 KB

patch

obsolete

>From 940ac506182eb0bdd92a980b4e9ee53d30c96787 Mon Sep 17 00:00:00 2001
>From: Richard Sharpe <realrichardsharpe@gmail.com>
>Date: Wed, 22 Feb 2012 06:25:54 -0800
>Subject: [PATCH] Honor SeTakeOwnershiPrivilege when client asks for
> SEC_STD_WRITE_OWNER but has no permission for that, but
> token has SeTakeOwnershipPrivilege
>
>Autobuild-User: Richard Sharpe <sharpe@samba.org>
>Autobuild-Date: Wed Feb 22 19:19:32 CET 2012 on sn-devel-104
>(cherry picked from commit 108253250048673493a636fd9fb2bf99b64ccf3c)
>---
> libcli/security/access_check.c |    5 +++++
> 1 files changed, 5 insertions(+), 0 deletions(-)
>
>diff --git a/libcli/security/access_check.c b/libcli/security/access_check.c
>index 1b02a86..a9b618f 100644
>--- a/libcli/security/access_check.c
>+++ b/libcli/security/access_check.c
>@@ -205,6 +205,11 @@ NTSTATUS se_access_check(const struct security_descriptor *sd,
> 		bits_remaining &= ~(SEC_RIGHTS_PRIV_BACKUP);
> 	}
> 
>+	if ((bits_remaining & SEC_STD_WRITE_OWNER) &&
>+	     security_token_has_privilege(token, SEC_PRIV_TAKE_OWNERSHIP)) {
>+		bits_remaining &= ~(SEC_STD_WRITE_OWNER);
>+	}
>+
> 	/* a NULL dacl allows access */
> 	if ((sd->type & SEC_DESC_DACL_PRESENT) && sd->dacl == NULL) {
> 		*access_granted = access_desired;
>-- 
>1.7.7.3
>

Flags:

jra: review+

Actions: View

Attachments on bug 8768: 7333 | 7338 | 7341