summaryrefslogtreecommitdiff
path: root/lib/param
diff options
context:
space:
mode:
authorSamuel Cabrero <scabrero@samba.org>2021-09-28 10:43:40 +0200
committerJule Anger <janger@samba.org>2021-11-09 19:45:32 +0000
commitb39b698cdac9ef97d018d6f02d59493ec5bff6e6 (patch)
treeaa2c6ccf68c04b207f9360f4092508fb256884e2 /lib/param
parent79a6616cbe723a2bc05084b90298745143a76a7c (diff)
downloadsamba-b39b698cdac9ef97d018d6f02d59493ec5bff6e6.tar.gz
CVE-2020-25717: loadparm: Add new parameter "min domain uid"
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14801 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14556 Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Signed-off-by: Samuel Cabrero <scabrero@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'lib/param')
-rw-r--r--lib/param/loadparm.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/lib/param/loadparm.c b/lib/param/loadparm.c
index 9c725402758..a26dabb9fca 100644
--- a/lib/param/loadparm.c
+++ b/lib/param/loadparm.c
@@ -2995,6 +2995,10 @@ struct loadparm_context *loadparm_init(TALLOC_CTX *mem_ctx)
"server smb3 encryption algorithms",
DEFAULT_SMB3_ENCRYPTION_ALGORITHMS);
+ lpcfg_do_global_parameter(lp_ctx,
+ "min domain uid",
+ "1000");
+
for (i = 0; parm_table[i].label; i++) {
if (!(lp_ctx->flags[i] & FLAG_CMDLINE)) {
lp_ctx->flags[i] |= FLAG_DEFAULT;