The branch, master has been updated
via 3e5acc1 Fix bug #9674 - Samba denies owner Read Control when there
is a DENY entry while W2K08 does not.
from 36da56e Make systemctl reference indirect in
packaging/NetworkManager/30-winbind-systemd
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -----------------------------------------------------------------
commit 3e5acc155bb7be5c531a4a35b16e040f71f628ac
Author: Richard Sharpe <[email protected]>
Date: Sat Feb 23 08:41:27 2013 -0800
Fix bug #9674 - Samba denies owner Read Control when there is a DENY entry
while W2K08 does not.
Signed-off-by: Richard Sharpe <[email protected]>
Reviewed-by: Jeremy Allison <[email protected]>
Autobuild-User(master): Jeremy Allison <[email protected]>
Autobuild-Date(master): Sat Feb 23 19:28:15 CET 2013 on sn-devel-104
-----------------------------------------------------------------------
Summary of changes:
libcli/security/access_check.c | 6 +++---
1 files changed, 3 insertions(+), 3 deletions(-)
Changeset truncated at 500 lines:
diff --git a/libcli/security/access_check.c b/libcli/security/access_check.c
index 936ffca..2425e8a 100644
--- a/libcli/security/access_check.c
+++ b/libcli/security/access_check.c
@@ -243,6 +243,9 @@ NTSTATUS se_access_check(const struct security_descriptor
*sd,
}
}
+ /* Explicitly denied bits always override */
+ bits_remaining |= explicitly_denied_bits;
+
/* The owner always gets owner rights as defined above. */
if (security_token_has_sid(token, sd->owner_sid)) {
if (owner_rights_default) {
@@ -258,9 +261,6 @@ NTSTATUS se_access_check(const struct security_descriptor
*sd,
}
}
- /* Explicitly denied bits always override */
- bits_remaining |= explicitly_denied_bits;
-
/*
* We check privileges here because they override even DENY entries.
*/
--
Samba Shared Repository
