[SCM] Samba Shared Repository - branch v4-13-test updated
The branch, v4-13-test has been updated
via b9b1d98af4c smbXsrv_{open,session,tcon}: protect
smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records
via 7065f203a9f gensec_krb5: restore ipv6 support for kpasswd
via 82e0f3e7997 netcmd: Use next_free_rid() function to calculate a SID
for restoring a backup
via e5c3a675464 python/tests/dsdb: Add tests for RID allocation
functions
via afad2fd9e24 dsdb: Add next_free_rid() function to allocate a RID
without modifying the database
via b3d59842fd9 netcmd: Add tests for performing an offline backup
immediately after joining a domain
via 00444ac64f5 netcmd: Ignore rIDUsedPool attribute in offline domain
backup test
via 445fb770c77 netcmd: Fix error-checking condition
via 303a0ecdd9d netcmd: Avoid database corruption by opting not to
create database files during an offline domain backup
via 54c353e9ad6 netcmd: Determine which files are to be copied for an
offline domain backup
via 4a68b1cb2dc netcmd: Add test for an offline backup of nested
directories
via 6569d0b9967 netcmd: Add test for an offline backup of a directory
containing hardlinks
via d0bde5703b2 samba-tool: Give better error information when the
'domain backup restore' fails with a duplicate SID
via 6e284db7877 samba-tool domain backup: Confirm the sidForRestore we
will put into the backup is free
from b01c4526fef s3: smbd: Fix uninitialized memory read in
process_symlink_open() when used with vfs_shadow_copy2().
https://git.samba.org/?p=samba.git;a=shortlog;h=v4-13-test
- Log -
commit b9b1d98af4c7cd2326e12e1c3b734056663932d1
Author: Stefan Metzmacher
Date: Mon Jul 5 17:17:30 2021 +0200
smbXsrv_{open,session,tcon}: protect
smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records
I saw systems with locking.tdb records being part of:
ctdb catdb smbXsrv_tcon_global.tdb
It's yet unknown how that happened, but we should not panic in srvsvc_*
calls because the info0 pointer was NULL.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14752
Signed-off-by: Stefan Metzmacher
Reviewed-by: Volker Lendecke
Autobuild-User(master): Stefan Metzmacher
Autobuild-Date(master): Tue Jul 6 11:08:43 UTC 2021 on sn-devel-184
(cherry picked from commit 00bab5b3c821f272153a25ded9743460887a7907)
Autobuild-User(v4-13-test): Karolin Seeger
Autobuild-Date(v4-13-test): Tue Jul 13 13:18:20 UTC 2021 on sn-devel-184
commit 7065f203a9fa0618e9a72043ec925eee7c7cdd01
Author: Stefan Metzmacher
Date: Fri Jul 2 09:37:25 2021 +0200
gensec_krb5: restore ipv6 support for kpasswd
We need to offer as much space we have in order to
get the address out of tsocket_address_bsd_sockaddr().
This fixes a regression in commit
43c808f2ff907497dfff0988ff90a48fdcfc16ef.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14750
Signed-off-by: Stefan Metzmacher
Reviewed-by: Andrew Bartlett
(cherry picked from commit 0388a8f33bdde49f1cc805a0291859203c1a52b4)
commit 82e0f3e79975ffdffd5afca77b6458a33488eff7
Author: Joseph Sutton
Date: Thu May 27 15:35:35 2021 +1200
netcmd: Use next_free_rid() function to calculate a SID for restoring a
backup
This means we won't get errors if the DC doesn't have a rIDNextRID
attribute, but we will still error if there is no RID Set or if all its
pools are exhausted.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14669
Signed-off-by: Joseph Sutton
Reviewed-by: Andrew Bartlett
Reviewed-by: Douglas Bagnall
(cherry picked from commit 59d293b60608172ae61551c642d13d3b215924e4)
commit e5c3a675464208bffad08a0e923406c9a2d4b0a5
Author: Joseph Sutton
Date: Mon May 24 16:46:28 2021 +1200
python/tests/dsdb: Add tests for RID allocation functions
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14669
Signed-off-by: Joseph Sutton
Reviewed-by: Andrew Bartlett
Reviewed-by: Douglas Bagnall
(cherry picked from commit 7c7cad81844950c3efe9a540a47b9d4e1ce1b2a1)
commit afad2fd9e2499f6ddacae9ddace22c81e9de7da0
Author: Joseph Sutton
Date: Mon May 24 12:59:59 2021 +1200
dsdb: Add next_free_rid() function to allocate a RID without modifying the
database
If used to generate SIDs for objects, care should be taken, as the
possibility for having duplicate objectSIDs can arise.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14669
Signed-off-by: Joseph Sutton
Reviewed-by: Andrew Bartlett
Reviewed-by: Douglas Bagnall
(cherry picked from commit cc98e03e7a0f2bf7a1ace2950fe6500f53640c1b)
commit b3d59842fd99c8d72dbc6f65259efad05bd5d897
Author: Joseph Sutton
Date: Mon May 24 14:58:40 2021 +1200
netcmd: Add tests for performing
[SCM] Samba Website Repository - branch master updated
The branch, master has been updated
via af20d51 Add Samba 4.14.6.
via f358d51 NEWS[4.14.6]: Samba 4.14.6 Available for Download
from 0c295f2 fix accent
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log -
commit af20d51ee9eeaa5c66e73aa5a55d6a86ee4d3c43
Author: Karolin Seeger
Date: Tue Jul 13 12:34:29 2021 +0200
Add Samba 4.14.6.
Signed-off-by: Karolin Seeger
commit f358d511094d455ea264dd052f4a165a12d86b90
Author: Karolin Seeger
Date: Tue Jul 13 12:30:40 2021 +0200
NEWS[4.14.6]: Samba 4.14.6 Available for Download
Signed-off-by: Karolin Seeger
---
Summary of changes:
history/header_history.html | 1 +
history/samba-4.14.6.html| 59
posted_news/20210713-103410.4.14.6.body.html | 13 ++
posted_news/20210713-103410.4.14.6.headline.html | 3 ++
4 files changed, 76 insertions(+)
create mode 100644 history/samba-4.14.6.html
create mode 100644 posted_news/20210713-103410.4.14.6.body.html
create mode 100644 posted_news/20210713-103410.4.14.6.headline.html
Changeset truncated at 500 lines:
diff --git a/history/header_history.html b/history/header_history.html
index c28a296..d6f2cef 100755
--- a/history/header_history.html
+++ b/history/header_history.html
@@ -9,6 +9,7 @@
Release Notes
+ samba-4.14.6
samba-4.14.5
samba-4.14.4
samba-4.14.3
diff --git a/history/samba-4.14.6.html b/history/samba-4.14.6.html
new file mode 100644
index 000..8f04c94
--- /dev/null
+++ b/history/samba-4.14.6.html
@@ -0,0 +1,59 @@
+http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd;>
+http://www.w3.org/1999/xhtml;>
+
+Samba 4.14.6 - Release Notes
+
+
+Samba 4.14.6 Available for Download
+
+https://download.samba.org/pub/samba/stable/samba-4.14.6.tar.gz;>Samba
4.14.6 (gzipped)
+https://download.samba.org/pub/samba/stable/samba-4.14.6.tar.asc;>Signature
+
+
+https://download.samba.org/pub/samba/patches/samba-4.14.5-4.14.6.diffs.gz;>Patch
(gzipped) against Samba 4.14.5
+https://download.samba.org/pub/samba/patches/samba-4.14.5-4.14.6.diffs.asc;>Signature
+
+
+
+ ==
+ Release Notes for Samba 4.14.6
+July 13, 2021
+ ==
+
+
+This is the latest stable release of the Samba 4.14 release series.
+
+
+Changes since 4.14.5
+
+
+o Jeremy Allison j...@samba.org
+ * BUG 14722: s3: lib: Fix talloc heirarcy error in parent_smb_fname().
+ * BUG 14732: smbd: Fix pathref unlinking in create_file_unixpath().
+ * BUG 14734: s3: VFS: default: Add proc_fds fallback for
vfswrap_fchown().
+ * BUG 14736: s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in
+ change_file_owner_to_parent() error path.
+
+o Ralph Boehme s...@samba.org
+ * BUG 14730: NT_STATUS_FILE_IS_A_DIRECTORY error messages when using
+ glusterfs VFS module.
+ * BUG 14734: s3/modules: fchmod: Fallback to path based chmod if pathref.
+ * BUG 14740: Spotlight RPC service doesnt work with vfs_glusterfs.
+
+o Stefan Metzmacher me...@samba.org
+ * BUG 14750: gensec_krb5: Restore ipv6 support for kpasswd.
+ * BUG 14752: smbXsrv_{open,session,tcon}: protect
+ smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records.
+
+o Joseph Sutton josephsut...@catalyst.net.nz
+ * BUG 14027: samba-tool domain backup offline doesnt work against
bind DLZ
+ backend.
+ * BUG 14669: netcmd: Use next_free_rid() function to calculate a SID for
+ restoring a backup.
+
+
+
+
+
+
diff --git a/posted_news/20210713-103410.4.14.6.body.html
b/posted_news/20210713-103410.4.14.6.body.html
new file mode 100644
index 000..cc34824
--- /dev/null
+++ b/posted_news/20210713-103410.4.14.6.body.html
@@ -0,0 +1,13 @@
+
+13 July 2021
+Samba 4.14.6 Available for Download
+
+This is the latest stable release of the Samba 4.14 release series.
+
+
+The uncompressed tarball has been signed using GnuPG (ID AA99442FB680B620).
+The source code can be https://download.samba.org/pub/samba/stable/samba-4.14.6.tar.gz;>downloaded
now.
+A https://download.samba.org/pub/samba/patches/samba-4.14.5-4.14.6.diffs.gz;>patch
against Samba 4.14.5 is also available.
+See https://www.samba.org/samba/history/samba-4.14.6.html;>the
release notes for more info.
+
+
diff --git a/posted_news/20210713-103410.4.14.6.headline.html
b/posted_news/20210713-103410.4.14.6.headline.html
new file mode 100644
index 000..7363805
--- /dev/null
+++ b/posted_news/20210713-103410.4.14.6.headline.html
@@ -0,0 +1,3 @@
+
+ 13 July 2021 Samba 4.14.6 Available for
Download
+
--
Samba Website Repository
[SCM] Samba Shared Repository - branch v4-14-stable updated
The branch, v4-14-stable has been updated
via 507cdfb744e VERSION: Disable GIT_SNAPSHOT for the 4.14.6 release.
via dc3702b5113 WHATSNEW: Add release notes for Samba 4.14.6.
via 8f7ab597969 smbXsrv_{open,session,tcon}: protect
smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records
via c1662a81220 gensec_krb5: restore ipv6 support for kpasswd
via a6447a1dce1 netcmd: Use next_free_rid() function to calculate a SID
for restoring a backup
via 69d8b64fdc1 python/tests/dsdb: Add tests for RID allocation
functions
via 94ca97bd121 dsdb: Add next_free_rid() function to allocate a RID
without modifying the database
via f9d2652a0b4 netcmd: Add tests for performing an offline backup
immediately after joining a domain
via b226e83a3dc netcmd: Ignore rIDUsedPool attribute in offline domain
backup test
via 79029224ee0 netcmd: Fix error-checking condition
via c1ac591c197 netcmd: Avoid database corruption by opting not to
create database files during an offline domain backup
via 7a7bfba1d98 netcmd: Determine which files are to be copied for an
offline domain backup
via 5b361227e7c netcmd: Add test for an offline backup of nested
directories
via b095932a303 netcmd: Add test for an offline backup of a directory
containing hardlinks
via 60714069b2c mdssvc: avoid direct filesystem access, use the VFS
via 19115477256 mdssvc: chdir() to the conn of the RPC request
via f8e857aeed3 mdssvc: maintain a connection struct in the mds_ctx
via 9439cfe7142 smbd: add create_conn_struct_cwd()
via 5ee1c6a0b01 smbd: pass tevent context to
create_conn_struct_as_root()
via b1cb178ab9d mdssvc: pass messaging context to mds_init_ctx()
via db5326a7f7a mdssvc: don't fail mds_add_result() if result is not
found in CNID set
via 6ce42a067f3 mdssvc: use a helper variable in mds_add_result()
via 858a116e796 smbd: add synthetic_pathref()
via 4936ad99859 s3: smbd: Remove erroneous
TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path.
via f8c4bcb0b22 s3/modules: fchmod: fallback to path based chmod if
pathref
via 866efccfa90 s3: VFS: default: Add proc_fd's fallback for
vfswrap_fchown().
via 35d7a23d720 s3: lib: Fix talloc heirarcy error in
parent_smb_fname().
via 42fa9f800fd smbd: fix pathref unlinking in create_file_unixpath()
via 1c8ba016208 smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code
check from call_trans2findfirst()
via c8355298be5 smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code
check from copy_file()
via 94fc3ac176a smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code
check from copy_file()
via acd2c1fed8d smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code
check from rename_internals()
via fc8becea75d smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code
check from rename_internals()
via 89851bdfb8a smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code
check from reply_search()
via 8dc1552ce2a smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code
check from create_file_unixpath()
via b87ada0acd7 smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code
check from open_streams_for_delete()
via 12a375df83b smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code
check from get_file_handle_for_metadata()
via 15e52ebd028 net: remove NT_STATUS_STOPPED_ON_SYMLINK status code
check from openat_pathref_fsp()
via ec89546b9b2 smbd: don't return NT_STATUS_STOPPED_ON_SYMLINK in
openat_pathref_fsp()
via 4b1918ca9a7 smbd: simplify error codepath in openat_pathref_fsp()
via 95183a05af1 smbd: expect valid stat info in openat_pathref_fsp()
via 19fe725a117 smbd: stat path before calling openat_pathref_fsp() in
smbd_dirptr_get_entry()
via 445b97d3168 smbd: move smb_fname creation to earlier point in
smbd_dirptr_get_entry()
via 821992641c3 smbd: stat path before calling openat_pathref_fsp() in
open_pathref_base_fsp()
via 5505b9a6834 smbd: remove a redundant fstat()in
create_file_unixpath()
via 2dff00e034a smbd: call stat before openat_pathref_fsp() in
create_file_unixpath()
via af4737c4011 smbd: fix a resource leak in create_file_unixpath()
via 589c10e91b9 smbd: stat path before calling openat_pathref_fsp() in
unlink_internals()
via 40583d313c3 s3/libadouble: stat path before calling
openat_pathref_fsp() in ad_unconvert_open_ad()
via cfccd7792e1 VERSION: Bump version up to 4.14.6...
from 852d0c036f0 VERSION: Disable GIT_SNAPSHOT for the 4.14.5 release.
https://git.samba.org/?p=samba.git;a=shortlog;h=v4-14-stable
- Log -
---
Summary of changes:
VERSION
[SCM] Samba Shared Repository - annotated tag samba-4.14.6 created
The annotated tag, samba-4.14.6 has been created
at 3dab93fc85e214dac45cc268ed7aaf555aa8218d (tag)
tagging 507cdfb744e8f6d5023ba821959b6572bc71a709 (commit)
replaces samba-4.14.5
tagged by Karolin Seeger
on Tue Jul 13 12:29:09 2021 +0200
- Log -
samba: tag release samba-4.14.6
-BEGIN PGP SIGNATURE-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=pyny
-END PGP SIGNATURE-
Jeremy Allison (4):
smbd: fix pathref unlinking in create_file_unixpath()
s3: lib: Fix talloc heirarcy error in parent_smb_fname().
s3: VFS: default: Add proc_fd's fallback for vfswrap_fchown().
s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in
change_file_owner_to_parent() error path.
Joseph Sutton (10):
netcmd: Add test for an offline backup of a directory containing hardlinks
netcmd: Add test for an offline backup of nested directories
netcmd: Determine which files are to be copied for an offline domain
backup
netcmd: Avoid database corruption by opting not to create database files
during an offline domain backup
netcmd: Fix error-checking condition
netcmd: Ignore rIDUsedPool attribute in offline domain backup test
netcmd: Add tests for performing an offline backup immediately after
joining a domain
dsdb: Add next_free_rid() function to allocate a RID without modifying
the database
python/tests/dsdb: Add tests for RID allocation functions
netcmd: Use next_free_rid() function to calculate a SID for restoring a
backup
Karolin Seeger (3):
VERSION: Bump version up to 4.14.6...
WHATSNEW: Add release notes for Samba 4.14.6.
VERSION: Disable GIT_SNAPSHOT for the 4.14.6 release.
Ralph Boehme (31):
s3/libadouble: stat path before calling openat_pathref_fsp() in
ad_unconvert_open_ad()
smbd: stat path before calling openat_pathref_fsp() in unlink_internals()
smbd: fix a resource leak in create_file_unixpath()
smbd: call stat before openat_pathref_fsp() in create_file_unixpath()
smbd: remove a redundant fstat()in create_file_unixpath()
smbd: stat path before calling openat_pathref_fsp() in
open_pathref_base_fsp()
smbd: move smb_fname creation to earlier point in smbd_dirptr_get_entry()
smbd: stat path before calling openat_pathref_fsp() in
smbd_dirptr_get_entry()
smbd: expect valid stat info in openat_pathref_fsp()
smbd: simplify error codepath in openat_pathref_fsp()
smbd: don't return NT_STATUS_STOPPED_ON_SYMLINK in openat_pathref_fsp()
net: remove NT_STATUS_STOPPED_ON_SYMLINK status code check from
openat_pathref_fsp()
smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code check from
get_file_handle_for_metadata()
smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code check from
open_streams_for_delete()
smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code check from
create_file_unixpath()
smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code check from
reply_search()
smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code check from
rename_internals()
smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code check from
rename_internals()
smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code check from
copy_file()
smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code check from
copy_file()
smbd: remove NT_STATUS_STOPPED_ON_SYMLINK status code check from
call_trans2findfirst()
s3/modules: fchmod: fallback to path based chmod if pathref
smbd: add synthetic_pathref()
mdssvc: use a helper variable in mds_add_result()
mdssvc: don't fail mds_add_result() if result is not found in CNID set
mdssvc: pass messaging context to mds_init_ctx()
smbd: pass tevent context to create_conn_struct_as_root()
smbd: add create_conn_struct_cwd()
mdssvc: maintain a connection struct in the mds_ctx
mdssvc: chdir() to the conn of the RPC request
mdssvc: avoid direct filesystem access, use the VFS
Stefan Metzmacher (2):
gensec_krb5: restore ipv6 support for kpasswd
smbXsrv_{open,session,tcon}: protect
[SCM] Samba Shared Repository - branch v4-14-test updated
The branch, v4-14-test has been updated
via 4801b6c298b VERSION: Bump version up to 4.14.7...
via 507cdfb744e VERSION: Disable GIT_SNAPSHOT for the 4.14.6 release.
via dc3702b5113 WHATSNEW: Add release notes for Samba 4.14.6.
from 8f7ab597969 smbXsrv_{open,session,tcon}: protect
smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records
https://git.samba.org/?p=samba.git;a=shortlog;h=v4-14-test
- Log -
commit 4801b6c298bde2fed4a8abbf0de29c9d0edff563
Author: Karolin Seeger
Date: Tue Jul 13 12:26:05 2021 +0200
VERSION: Bump version up to 4.14.7...
and re-enable GIT_SNAPSHOT.
Signed-off-by: Karolin Seeger
commit 507cdfb744e8f6d5023ba821959b6572bc71a709
Author: Karolin Seeger
Date: Tue Jul 13 12:25:23 2021 +0200
VERSION: Disable GIT_SNAPSHOT for the 4.14.6 release.
Signed-off-by: Karolin Seeger
commit dc3702b511324b77cea68decff66acf2a5113b0c
Author: Karolin Seeger
Date: Tue Jul 13 12:24:33 2021 +0200
WHATSNEW: Add release notes for Samba 4.14.6.
Signed-off-by: Karolin Seeger
---
Summary of changes:
VERSION | 2 +-
WHATSNEW.txt | 64 ++--
2 files changed, 63 insertions(+), 3 deletions(-)
Changeset truncated at 500 lines:
diff --git a/VERSION b/VERSION
index a50dae275cf..3a5ec52ebd0 100644
--- a/VERSION
+++ b/VERSION
@@ -25,7 +25,7 @@
SAMBA_VERSION_MAJOR=4
SAMBA_VERSION_MINOR=14
-SAMBA_VERSION_RELEASE=6
+SAMBA_VERSION_RELEASE=7
# If a official release has a serious bug #
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 7a1af731a94..452eee13b54 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,3 +1,64 @@
+ ==
+ Release Notes for Samba 4.14.6
+July 13, 2021
+ ==
+
+
+This is the latest stable release of the Samba 4.14 release series.
+
+
+Changes since 4.14.5
+
+
+o Jeremy Allison
+ * BUG 14722: s3: lib: Fix talloc heirarcy error in parent_smb_fname().
+ * BUG 14732: smbd: Fix pathref unlinking in create_file_unixpath().
+ * BUG 14734: s3: VFS: default: Add proc_fd's fallback for vfswrap_fchown().
+ * BUG 14736: s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in
+ change_file_owner_to_parent() error path.
+
+o Ralph Boehme
+ * BUG 14730: NT_STATUS_FILE_IS_A_DIRECTORY error messages when using
+ glusterfs VFS module.
+ * BUG 14734: s3/modules: fchmod: Fallback to path based chmod if pathref.
+ * BUG 14740: Spotlight RPC service doesn't work with vfs_glusterfs.
+
+o Stefan Metzmacher
+ * BUG 14750: gensec_krb5: Restore ipv6 support for kpasswd.
+ * BUG 14752: smbXsrv_{open,session,tcon}: protect
+ smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records.
+
+o Joseph Sutton
+ * BUG 14027: samba-tool domain backup offline doesn't work against bind DLZ
+ backend.
+ * BUG 14669: netcmd: Use next_free_rid() function to calculate a SID for
+ restoring a backup.
+
+
+###
+Reporting bugs & Development Discussion
+###
+
+Please discuss this release on the samba-technical mailing list or by
+joining the #samba-technical IRC channel on irc.freenode.net.
+
+If you do report problems then please try to send high quality
+feedback. If you don't provide vital information to help us track down
+the problem then you will probably be ignored. All bug reports should
+be filed under the Samba 4.1 and newer product in the project's Bugzilla
+database (https://bugzilla.samba.org/).
+
+
+==
+== Our Code, Our Bugs, Our Responsibility.
+== The Samba Team
+==
+
+
+Release notes for older releases follow:
+
+
+
==
Release Notes for Samba 4.14.5
June 01, 2021
@@ -59,8 +120,7 @@ database (https://bugzilla.samba.org/).
==
-Release notes for older releases follow:
-
+--
==
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 0657db26447 s3: smbd: Explicitly code the semantics of "dos
filemode" into the chown code.
from 147dd9d58a4 libcli/smb: let smb2_negotiate_context_parse() only
parse the expected number of contexts
https://git.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 0657db26447ad9b0d2130fe07163e953eba2bcc2
Author: Jeremy Allison
Date: Mon Jun 28 13:54:52 2021 -0700
s3: smbd: Explicitly code the semantics of "dos filemode" into the chown
code.
We actually don't need this to get the right semantics, as the open or the
set_sd() code catches the correct cases and returns ACCESS_DENIED, but it
makes me much happier to see the prerequisites needed expressed in code here
right at the point of use.
Signed-off-by: Jeremy Allison
Reviewed-by: Ralph Boehme
Autobuild-User(master): Ralph Böhme
Autobuild-Date(master): Tue Jul 13 08:11:36 UTC 2021 on sn-devel-184
---
Summary of changes:
source3/smbd/posix_acls.c | 15 +++
1 file changed, 15 insertions(+)
Changeset truncated at 500 lines:
diff --git a/source3/smbd/posix_acls.c b/source3/smbd/posix_acls.c
index 8bfaea27e39..899e7dc3c1e 100644
--- a/source3/smbd/posix_acls.c
+++ b/source3/smbd/posix_acls.c
@@ -3440,9 +3440,24 @@ NTSTATUS try_chown(files_struct *fsp, uid_t uid, gid_t
gid)
}
/* Case (4). */
+ /* If "dos filemode" isn't set, we're done. */
if (!lp_dos_filemode(SNUM(fsp->conn))) {
return NT_STATUS_ACCESS_DENIED;
}
+ /*
+* If we have a writable handle, obviously we
+* can write to the file.
+*/
+ if (!fsp->fsp_flags.can_write) {
+ /*
+* If we don't have a writable handle, we
+* need to read the ACL on the file to
+* see if we can write to it.
+*/
+ if (!can_write_to_fsp(fsp)) {
+ return NT_STATUS_ACCESS_DENIED;
+ }
+ }
/* only allow chown to the current user. This is more secure,
and also copes with the case where the SID in a take ownership ACL is
--
Samba Shared Repository
