The Samba-Bugzilla – Attachment 8579 Details for
Bug 9674
Samba denies owner Read Control when there is a DENY entry while W2K08 does not
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Proposed patch (for master).
bug-9674.patch (text/plain), 783 bytes, created by
Jeremy Allison
on 2013-02-22 23:58:37 UTC
(
hide
)
Description:
Proposed patch (for master).
Filename:
MIME Type:
Creator:
Jeremy Allison
Created:
2013-02-22 23:58:37 UTC
Size:
783 bytes
patch
obsolete
>diff --git a/libcli/security/access_check.c b/libcli/security/access_check.c >index 936ffca..2425e8a 100644 >--- a/libcli/security/access_check.c >+++ b/libcli/security/access_check.c >@@ -243,6 +243,9 @@ NTSTATUS se_access_check(const struct security_descriptor *sd, > } > } > >+ /* Explicitly denied bits always override */ >+ bits_remaining |= explicitly_denied_bits; >+ > /* The owner always gets owner rights as defined above. */ > if (security_token_has_sid(token, sd->owner_sid)) { > if (owner_rights_default) { >@@ -258,9 +261,6 @@ NTSTATUS se_access_check(const struct security_descriptor *sd, > } > } > >- /* Explicitly denied bits always override */ >- bits_remaining |= explicitly_denied_bits; >- > /* > * We check privileges here because they override even DENY entries. > */
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=8579">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Flags:
rsharpe
:
review+
Actions:
View
Attachments on
bug 9674
: 8579