summaryrefslogtreecommitdiff
path: root/source3
Commit message (Collapse)AuthorAgeFilesLines
* s3/passdb/py_passdb.c: free frame before returningAurelien Aptel2016-03-151-23/+23
| | | | | | | | | | | | | | these talloc frames are freed *after* the return instruction and are never executed. this fixes potential memory leaks. Signed-off-by: Aurelien Aptel <aaptel@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Amitay Isaacs <amitay@gmail.com> Autobuild-User(master): Amitay Isaacs <amitay@samba.org> Autobuild-Date(master): Tue Mar 1 12:08:40 CET 2016 on sn-devel-144 (cherry picked from commit f2675909d34b1847a889e65023b9f0ed36e6bd52)
* build: mark explicit dependencies on pytalloc-utilGarming Sam2016-03-152-2/+2
| | | | | | | | | | All subsystems that include pytalloc.h need to link against pytalloc-util. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11789 Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* libsmb/pysmb: add pytalloc-util dependency to fix the build.Günther Deschner2016-03-151-1/+1
| | | | | | | | | | | | Guenther Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Michael Adam <obnox@samba.org> Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Tue Feb 2 15:49:14 CET 2016 on sn-devel-144 (cherry picked from commit 943e69ca8fd4491004eafbf29ed2ca748b0b7480)
* build: fix disk-free quota support on Solaris 10Uri Simchoni2016-03-152-0/+25
| | | | | | | | | | | | | | | | | | | | | | | | | | Samba has no code to support quota on Solaris 10 (and possibly other os's such as AIX) using the new quota interface. The new interface serves both disk size/free space reporting (clamping the underlying file system numbers with quota), and direct manipulation of the user's quota. However, there's legacy code that supports only disk size/free space on Solaris 10. In the waf build, this code is not compiled because there is no test for it. This patch adds a test to see whether the legacy code can be used. Issue reported and fix tested by Andrew Morgan <morgan@orst.edu>. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11788 Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sun Mar 13 01:37:58 CET 2016 on sn-devel-144 (cherry picked from commit 0a9acd445d246c7758e994b0c69cc90bdbbef2fe)
* smbd: Only check dev/inode in open_directory, not the full stat()Andrew Bartlett2016-03-151-2/+12
| | | | | | | | | | | | | | | | | | | | This is needed because the smb2.create.mkdir-dup test creates a race, and against an AD DC this can cause a flapping test if the lstat() and stat() calls are made either side of the chown() due to creation of a file by administrator. Fix based on original patches by myself, by Douglas Bagnall <douglas.bagnall@catalyst.net.nz>. and Jeremy Allison <jra@samba.org> BUG: https://bugzilla.samba.org/show_bug.cgi?id=11780 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sat Mar 12 09:43:21 CET 2016 on sn-devel-144 (cherry picked from commit 5fc6d2dabdf2aeef74fdefaa67eae0348bbf7a44)
* s3:winbindd: don't unclude two '\0' at the end of the domain listStefan Metzmacher2016-03-151-1/+1
| | | | | | | | | | This avoids a scary "trustdom_list_done: Got invalid trustdom response" message. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11782 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org> (cherry picked from commit bb387c5b90e19b5a2f7d65fb8db816e9da51d090)
* s3:libnet:libnet_join: update msDS-SupportedEncryptionTypes (if required) ↵Günther Deschner2016-03-151-4/+55
| | | | | | | | | | | | | | | | | | with machine creds. Guenther BUG: https://bugzilla.samba.org/show_bug.cgi?id=11755 Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Signed-off-by: Guenther Deschner <gd@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Mon Mar 14 19:38:48 CET 2016 on sn-devel-144 (cherry picked from commit 06aefe4b956ae8748e20ae4c730aa344e81808b6)
* s3:libnet:libnet_join: fill in output enctypes and only modify when necessary.Günther Deschner2016-03-152-2/+18
| | | | | | | | | | Guenther BUG: https://bugzilla.samba.org/show_bug.cgi?id=11755 Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 5d498d1b4d9b83f179fb7b2841a19ad984eec5f8)
* s3:libnet:libnet_join: define list of desired encryption types only once.Günther Deschner2016-03-153-22/+22
| | | | | | | | | | Guenther BUG: https://bugzilla.samba.org/show_bug.cgi?id=11755 Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit e0da059b39f9dd5ccb74f32f965e1ced384c77eb)
* s3:librpc:idl:libnet_join: add encryption types to libnet_JoinCtx.Günther Deschner2016-03-151-1/+3
| | | | | | | | | | Guenther BUG: https://bugzilla.samba.org/show_bug.cgi?id=11755 Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 4a49f6fac9d6c77d1eedf914308e67eb6e2baa8d)
* s3:libnet:libnet_join: always try to create machineaccount via LDAP first.Günther Deschner2016-03-151-3/+25
| | | | | | | | | | Guenther BUG: https://bugzilla.samba.org/show_bug.cgi?id=11755 Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit df8f79cc9d44ad7b2caa6b86b7ebde7bb1fd4c8c)
* s3:libads:ldap: fix ads_check_ou_dn to deal with account_ou not being ↵Günther Deschner2016-03-151-4/+10
| | | | | | | | | | | | initialized Guenther BUG: https://bugzilla.samba.org/show_bug.cgi?id=11755 Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit c61b111e6fa3e138d4d9cf5038b69644248e834a)
* s3:libads:ndr: add ADS_AUTH_USER_CREDS to ndr_print_ads_auth_flags()Günther Deschner2016-03-151-0/+1
| | | | | | | | | | Guenther BUG: https://bugzilla.samba.org/show_bug.cgi?id=11755 Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit e8f6acdeece990dc8953d494113dee856d80da45)
* s3:libads:ldap: print LDAP error message with log level 10.Günther Deschner2016-03-151-0/+14
| | | | | | | | | | Guenther BUG: https://bugzilla.samba.org/show_bug.cgi?id=11755 Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 34030b025b9e4cd5e7321d6e242f6c03da2a60c0)
* s3:libnet:libnet_join: prepare to allow connecting with machine creds.Günther Deschner2016-03-151-5/+68
| | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11755 Guenther Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 71d5634ab58f0ca21db633990231bd01a22c956c)
* Partly revert "s3:libads: setup the msDS-SupportedEncryptionTypes attribute ↵Günther Deschner2016-03-151-0/+46
| | | | | | | | | | | | on ldap_add" This partly reverts commit 0c74d62524db376b6a3fac00c688be0cdffcaa80. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11755 Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 6686f67d2a91146c8bb2fb2a8104fcaa5710b855)
* vfs_glusterfs: Fix use after free in AIO callback.Ira Cooper2016-03-141-9/+8
| | | | | | | | | | | | | | | | | The wrapper->state pointer is not getting NULLed during free allowing us to do a use after free. Thanks to Red Hat for discovering this issue. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11774 Signed-off-by: Ira Copper <ira@samba.org> Reviewed-by: Poornima G <pgurusid@redhat.com> Tested-by: Christopher Blum <cblum@redhat.com> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(v4-4-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-4-test): Mon Mar 14 13:19:27 CET 2016 on sn-devel-144
* s3:smbd: add negprot remote arch detection for OSXJustin Maggard2016-03-141-14/+25
| | | | | | | | | | | | | | | | | Remote arch detection for OSX clients has been broken for some time, since both Samba and OSX started supporting SMB2. Fix it by adding modern OSX client detection support to the negprot remote arch detection routine. Bug: https://bugzilla.samba.org/show_bug.cgi?id=11773 Signed-off-by: Justin Maggard <jmaggard10@gmail.com> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Boehme <rb@sernet.de> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Mar 3 09:03:53 CET 2016 on sn-devel-144 (cherry picked from commit d7ca174744001fabdc32e1c334dad347bb985756)
* s3:smbd: rework negprot remote arch detectionJustin Maggard2016-03-142-49/+73
| | | | | | | | | | | | | Negprot remote arch detection is very cryptic. Rework it so it's easier to understand, and therefore more extensible, following the protocol table in inline comments. This also allows us to remove some hacks. Bug: https://bugzilla.samba.org/show_bug.cgi?id=11773 Signed-off-by: Justin Maggard <jmaggard10@gmail.com> Reviewed-by: Ralph Boehme <rb@sernet.de> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit b69b96fc14128f50a906b4f5b34934efbc94afbc)
* libnet: make Kerberos domain join site-awareUri Simchoni2016-03-141-0/+52
| | | | | | | | | | | | | | | | | When joining a domain using Kerberos authentication, create a configuration file for the Kerberos libs to prefer on-site domain controllers, without relying on the winbindd Kerberos locator, which many not be operational at this stage. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11769 Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Mar 8 01:30:35 CET 2016 on sn-devel-144 (cherry picked from commit 0dbab0e33e9efc46f72b6a8b0dc894ea251df9aa)
* dsgetdcname: fix flag checkUri Simchoni2016-03-141-1/+1
| | | | | | | | | | Fix the check for zero requseted flags. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11769 Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 6d717402e42131298ba670ee47686379854ec56d)
* dsgetdcname: return an IP address on rediscoveryUri Simchoni2016-03-141-7/+7
| | | | | | | | | | | | | When dsgetdcname return its result based on discovery process (instead of retrieving cached value), always return the found server's IP address in dc_address field, rather than its netbios name. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11769 Signed-off-by: Uri Simchoni <uri@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit ef84f4c018424b1fcc232a4780dc2c0435701d86)
* smbd:smb2: move op variable into scope of use in smb2_create_sendMichael Adam2016-03-141-1/+1
| | | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> (cherry picked from commit 272d06d40b7338de7db8954192f42c7340753920) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbd:smb2: implement create replayMichael Adam2016-03-141-6/+89
| | | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 2fd54b533292e54de8c289fb093748fb171c15a7) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbXsrv.idl: add create_action to smbXsrv_openMichael Adam2016-03-141-0/+1
| | | | | | | | | | Needed for create replay. Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 03a3aa981500c5ba9d82c27f36e107672b071203) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbXsrv:open: add smb2srv_open_lookup_replay_cache()Michael Adam2016-03-142-0/+45
| | | | | | | | | | | A function to find an open from the replay cache, based on the create_guid handed in. Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 5b90c986eda8201660434a9a1d64e5a0a625379e) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smb2:create: create replay cache when request has a create_guidMichael Adam2016-03-141-0/+10
| | | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 08e34830b7f4d631a24e94aad1502949eb2cd675) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbXsrv:open: maintain a replay cacheMichael Adam2016-03-141-2/+112
| | | | | | | | | | | | | | | | This caches a map create_guid -> file_id, so that a replayed create can find the already created open again. This is automatically deleted once the first use of the file handle is happening (triggered by the lookup for the file-id). Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 4370bda3c0f35c1cc9b45a004bb829b1d69a4e38) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* librpc:smbXsrv.idl: add flags to smbXsrv_openMichael Adam2016-03-141-0/+6
| | | | | | | | | | These flags reflect the need for and state of the replay cache. Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 1eb5f1e42276999f0f4fc73cac03a188fb6d83e9) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbd:smb2: allow the REPLAY_OPERATION flag for SMB3+ requestsMichael Adam2016-03-141-0/+3
| | | | | | | | | | | Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Signed-off-by: Michael Adam <obnox@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 6251d926e0cdd37ed312f7dc78ce2735e979c25f) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbd: fix crash in smbXsrv_client_global_remove()Michael Adam2016-03-141-6/+2
| | | | | | | | | | | | | | | Probably copy-n-paste error. Uncovered by the multi-channel-related tests we're currently writing to exercise this code more. Pair-Programmed-With: Guenther Deschner <gd@samba.org> Signed-off-by: Michael Adam <obnox@samba.org> Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (cherry picked from commit 04265199b389a7b38c3047985da68e8442a0b746) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* s3:registry: use dbwrap_purge_bystring instead of dbwrap_delete_bystringMichael Adam2016-03-141-6/+1
| | | | | | | | | | where appropriate Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> (cherry picked from commit 8f158bab9f8dbdbdb460258a08a15d0d6c41cbac) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbd:smb2_creat: remove outdated TODO commentsMichael Adam2016-03-141-8/+0
| | | | | | | | | | | | | | | Leases have meanwhile been implemented and the TODO has been taken care of. Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allson <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sun Feb 28 08:16:26 CET 2016 on sn-devel-144 (cherry picked from commit abd8b182447fce6dc1436e8ff3907b871705d7e0) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbXsrv_client: factor fetch-locking of global record into functionMichael Adam2016-03-141-29/+33
| | | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 0fe29f66326e9a39254fdc2fd255075e5055eeb6) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbXsrv_session: factor fetch-locking of local record into functionMichael Adam2016-03-141-29/+31
| | | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit aaddde12d997c7d35b1e76709afd310990dc9cdb) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbXsrv_session: factor fetch-locking of global record into functionMichael Adam2016-03-141-36/+33
| | | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 37eba9006e95235785d851f4d4c8110bf77e2b64) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbXsrv_tcon: factor fetch-locking of local record into functionMichael Adam2016-03-141-29/+29
| | | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit a9dcbd09801ab19c2abdb803c730120bd20d8175) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbXsrv_tcon: factor fetch-locking of global record into functionMichael Adam2016-03-141-31/+30
| | | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit a5e4f14c3b132c886cda2ab4cc14f1f764ff04eb) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbXsrv_open: factor fetch-locking of local record into functionMichael Adam2016-03-141-22/+26
| | | | | | | | | | | | | | smbXsrv_open_local_fetch_locked() Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Feb 26 22:35:28 CET 2016 on sn-devel-144 (cherry picked from commit bba426dbbbe0e4aebd99b78cff037eac754aa282) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* smbXsrv_open: factor fetch-locking of global record into functionMichael Adam2016-03-141-49/+36
| | | | | | | | | | smbXsrv_open_global_fetch_locked() Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 7b8cfa1cbc2738f798fad748ea40c029d99814a0) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11779
* CVE-2015-7560: s3: torture3: Add new POSIX-SYMLINK-EA test.Jeremy Allison2016-03-082-1/+179
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11648 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* CVE-2015-7560: s3: torture3: Add new POSIX-SYMLINK-ACL test.Jeremy Allison2016-03-082-1/+199
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11648 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* CVE-2015-7560: s3: libsmb: Add SMB1-only POSIX cli_posix_setacl() functions. ↵Jeremy Allison2016-03-082-0/+111
| | | | | | | | | Needed for tests. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11648 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* CVE-2015-7560: s3: libsmb: Rename cli_posix_getfaclXX() functions to ↵Jeremy Allison2016-03-083-19/+19
| | | | | | | | | cli_posix_getacl() as they operate on pathnames. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11648 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* CVE-2015-7560: s3: smbd: Refuse to set EA's on a symlink.Jeremy Allison2016-03-081-0/+5
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11648 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* CVE-2015-7560: s3: smbd: Silently return no EA's available on a symlink.Jeremy Allison2016-03-081-0/+9
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11648 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* CVE-2015-7560: s3: smbd: Set return values early, allows removal of code ↵Jeremy Allison2016-03-081-8/+5
| | | | | | | | | duplication. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11648 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* CVE-2015-7560: s3: smbd: Refuse to get a POSIX ACL on a symlink.Jeremy Allison2016-03-081-0/+7
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11648 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* CVE-2015-7560: s3: smbd: Refuse to set a POSIX ACL on a symlink.Jeremy Allison2016-03-081-0/+6
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11648 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* CVE-2015-7560: s3: smbd: Refuse to set an ACL from a POSIX file handle on a ↵Jeremy Allison2016-03-081-0/+6
| | | | | | | | | symlink. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11648 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>