JehanneOS/newlib
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

* security.cc (alloc_sd): Add unrelated ACCESS_ALLOWED_ACE behind

Browse Source 
the `everyone' ACE.
This commit is contained in:
Corinna Vinschen 2001-04-26 09:21:33 +00:00
parent acb6fc4173
commit 22ae5a5be8
2 changed files with 11 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
winsup/cygwin/ChangeLog
View File

@ -1,3 +1,8 @@
2001-04-26 Kazuhiro Fujieda <fujieda@jaist.ac.jp>
* security.cc (alloc_sd): Add unrelated ACCESS_ALLOWED_ACE behind
the `everyone' ACE.
Wed Apr 25 15:07:37 2001 Christopher Faylor <cgf@cygnus.com> Wed Apr 25 15:07:37 2001 Christopher Faylor <cgf@cygnus.com>
* sigproc.h [sigthread]: Add exception field. [sigframe::~sigframe]: * sigproc.h [sigthread]: Add exception field. [sigframe::~sigframe]:

14
winsup/cygwin/security.cc
View File

@ -622,6 +622,11 @@ alloc_sd (uid_t uid, gid_t gid, const char *logsrv, int attribute,
group_sid, acl_len, inherit)) group_sid, acl_len, inherit))
return NULL; return NULL;
/* Set allow ACE for everyone. */
if (!add_access_allowed_ace (acl, ace_off++, other_allow,
get_world_sid (), acl_len, inherit))
return NULL;
/* Get owner and group from current security descriptor. */ /* Get owner and group from current security descriptor. */
PSID cur_owner_sid = NULL; PSID cur_owner_sid = NULL;
PSID cur_group_sid = NULL; PSID cur_group_sid = NULL;
@ -649,8 +654,7 @@ alloc_sd (uid_t uid, gid_t gid, const char *logsrv, int attribute,
continue; continue;
/* /*
* Add unrelated ACCESS_DENIED_ACE to the beginning but * Add unrelated ACCESS_DENIED_ACE to the beginning but
* behind the owner_deny, ACCESS_ALLOWED_ACE to the end * behind the owner_deny, ACCESS_ALLOWED_ACE to the end.
* but in front of the `everyone' ACE.
*/ */
if (!AddAce(acl, ACL_REVISION, if (!AddAce(acl, ACL_REVISION,
ace->Header.AceType == ACCESS_DENIED_ACE_TYPE ? ace->Header.AceType == ACCESS_DENIED_ACE_TYPE ?
@ -661,14 +665,8 @@ alloc_sd (uid_t uid, gid_t gid, const char *logsrv, int attribute,
return NULL; return NULL;
} }
acl_len += ace->Header.AceSize; acl_len += ace->Header.AceSize;
++ace_off;
} }
/* Set allow ACE for everyone. */
if (!add_access_allowed_ace (acl, ace_off++, other_allow,
get_world_sid (), acl_len, inherit))
return NULL;
/* Set AclSize to computed value. */ /* Set AclSize to computed value. */
acl->AclSize = acl_len; acl->AclSize = acl_len;
debug_printf ("ACL-Size: %d", acl_len); debug_printf ("ACL-Size: %d", acl_len);