mirror of http://galexander.org/git/simplesshd.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
306 lines
7.8 KiB
306 lines
7.8 KiB
/*
|
|
* Unix SMB/Netbios implementation.
|
|
* Version 2.2.x
|
|
* Portable SMB ACL interface
|
|
* Copyright (C) Jeremy Allison 2000
|
|
* Copyright (C) 2007-2014 Wayne Davison
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* with this program; if not, visit the http://fsf.org website.
|
|
*/
|
|
|
|
#ifdef SUPPORT_ACLS
|
|
|
|
#ifdef HAVE_SYS_ACL_H
|
|
#include <sys/acl.h>
|
|
#endif
|
|
#ifdef HAVE_ACL_LIBACL_H
|
|
#include <acl/libacl.h>
|
|
#endif
|
|
|
|
#define SMB_MALLOC(cnt) new_array(char, cnt)
|
|
#define SMB_MALLOC_P(obj) new_array(obj, 1)
|
|
#define SMB_MALLOC_ARRAY(obj, cnt) new_array(obj, cnt)
|
|
#define SMB_REALLOC(mem, cnt) realloc_array(mem, char, cnt)
|
|
#define slprintf snprintf
|
|
|
|
#if defined HAVE_POSIX_ACLS /*-----------------------------------------------*/
|
|
|
|
/* This is an identity mapping (just remove the SMB_). */
|
|
|
|
#define SMB_ACL_TAG_T acl_tag_t
|
|
#define SMB_ACL_TYPE_T acl_type_t
|
|
|
|
/* Types of ACLs. */
|
|
#define SMB_ACL_USER ACL_USER
|
|
#define SMB_ACL_USER_OBJ ACL_USER_OBJ
|
|
#define SMB_ACL_GROUP ACL_GROUP
|
|
#define SMB_ACL_GROUP_OBJ ACL_GROUP_OBJ
|
|
#define SMB_ACL_OTHER ACL_OTHER
|
|
#define SMB_ACL_MASK ACL_MASK
|
|
|
|
#define SMB_ACL_T acl_t
|
|
|
|
#define SMB_ACL_ENTRY_T acl_entry_t
|
|
|
|
#define SMB_ACL_FIRST_ENTRY ACL_FIRST_ENTRY
|
|
#define SMB_ACL_NEXT_ENTRY ACL_NEXT_ENTRY
|
|
|
|
#define SMB_ACL_TYPE_ACCESS ACL_TYPE_ACCESS
|
|
#define SMB_ACL_TYPE_DEFAULT ACL_TYPE_DEFAULT
|
|
|
|
#define SMB_ACL_VALID_NAME_BITS (4 | 2 | 1)
|
|
#define SMB_ACL_VALID_OBJ_BITS (4 | 2 | 1)
|
|
|
|
#define SMB_ACL_NEED_SORT
|
|
|
|
#elif defined HAVE_TRU64_ACLS /*---------------------------------------------*/
|
|
|
|
/* This is for DEC/Compaq Tru64 UNIX */
|
|
|
|
#define SMB_ACL_TAG_T acl_tag_t
|
|
#define SMB_ACL_TYPE_T acl_type_t
|
|
|
|
/* Types of ACLs. */
|
|
#define SMB_ACL_USER ACL_USER
|
|
#define SMB_ACL_USER_OBJ ACL_USER_OBJ
|
|
#define SMB_ACL_GROUP ACL_GROUP
|
|
#define SMB_ACL_GROUP_OBJ ACL_GROUP_OBJ
|
|
#define SMB_ACL_OTHER ACL_OTHER
|
|
#define SMB_ACL_MASK ACL_MASK
|
|
|
|
#define SMB_ACL_T acl_t
|
|
|
|
#define SMB_ACL_ENTRY_T acl_entry_t
|
|
|
|
#define SMB_ACL_FIRST_ENTRY 0
|
|
#define SMB_ACL_NEXT_ENTRY 1
|
|
|
|
#define SMB_ACL_TYPE_ACCESS ACL_TYPE_ACCESS
|
|
#define SMB_ACL_TYPE_DEFAULT ACL_TYPE_DEFAULT
|
|
|
|
#define SMB_ACL_VALID_NAME_BITS (4 | 2 | 1)
|
|
#define SMB_ACL_VALID_OBJ_BITS (4 | 2 | 1)
|
|
|
|
#define SMB_ACL_NEED_SORT
|
|
|
|
#elif defined HAVE_UNIXWARE_ACLS || defined HAVE_SOLARIS_ACLS /*-------------*/
|
|
|
|
/* Donated by Michael Davidson <md@sco.COM> for UnixWare / OpenUNIX.
|
|
* Modified by Toomas Soome <tsoome@ut.ee> for Solaris. */
|
|
|
|
/* SVR4.2 ES/MP ACLs */
|
|
typedef int SMB_ACL_TAG_T;
|
|
typedef int SMB_ACL_TYPE_T;
|
|
|
|
/* Types of ACLs. */
|
|
#define SMB_ACL_USER USER
|
|
#define SMB_ACL_USER_OBJ USER_OBJ
|
|
#define SMB_ACL_GROUP GROUP
|
|
#define SMB_ACL_GROUP_OBJ GROUP_OBJ
|
|
#define SMB_ACL_OTHER OTHER_OBJ
|
|
#define SMB_ACL_MASK CLASS_OBJ
|
|
|
|
typedef struct SMB_ACL_T {
|
|
int size;
|
|
int count;
|
|
int next;
|
|
struct acl acl[1];
|
|
} *SMB_ACL_T;
|
|
|
|
typedef struct acl *SMB_ACL_ENTRY_T;
|
|
|
|
#define SMB_ACL_FIRST_ENTRY 0
|
|
#define SMB_ACL_NEXT_ENTRY 1
|
|
|
|
#define SMB_ACL_TYPE_ACCESS 0
|
|
#define SMB_ACL_TYPE_DEFAULT 1
|
|
|
|
#define SMB_ACL_VALID_NAME_BITS (4 | 2 | 1)
|
|
#define SMB_ACL_VALID_OBJ_BITS (4 | 2 | 1)
|
|
|
|
#define SMB_ACL_NEED_SORT
|
|
|
|
#ifdef __CYGWIN__
|
|
#define SMB_ACL_LOSES_SPECIAL_MODE_BITS
|
|
#endif
|
|
|
|
#elif defined HAVE_HPUX_ACLS /*----------------------------------------------*/
|
|
|
|
/* Based on the Solaris & UnixWare code. */
|
|
|
|
#undef GROUP
|
|
#include <sys/aclv.h>
|
|
|
|
/* SVR4.2 ES/MP ACLs */
|
|
typedef int SMB_ACL_TAG_T;
|
|
typedef int SMB_ACL_TYPE_T;
|
|
|
|
/* Types of ACLs. */
|
|
#define SMB_ACL_USER USER
|
|
#define SMB_ACL_USER_OBJ USER_OBJ
|
|
#define SMB_ACL_GROUP GROUP
|
|
#define SMB_ACL_GROUP_OBJ GROUP_OBJ
|
|
#define SMB_ACL_OTHER OTHER_OBJ
|
|
#define SMB_ACL_MASK CLASS_OBJ
|
|
|
|
typedef struct SMB_ACL_T {
|
|
int size;
|
|
int count;
|
|
int next;
|
|
struct acl acl[1];
|
|
} *SMB_ACL_T;
|
|
|
|
typedef struct acl *SMB_ACL_ENTRY_T;
|
|
|
|
#define SMB_ACL_FIRST_ENTRY 0
|
|
#define SMB_ACL_NEXT_ENTRY 1
|
|
|
|
#define SMB_ACL_TYPE_ACCESS 0
|
|
#define SMB_ACL_TYPE_DEFAULT 1
|
|
|
|
#define SMB_ACL_VALID_NAME_BITS (4 | 2 | 1)
|
|
#define SMB_ACL_VALID_OBJ_BITS (4 | 2 | 1)
|
|
|
|
#define SMB_ACL_NEED_SORT
|
|
|
|
#elif defined HAVE_IRIX_ACLS /*----------------------------------------------*/
|
|
|
|
/* IRIX ACLs */
|
|
|
|
#define SMB_ACL_TAG_T acl_tag_t
|
|
#define SMB_ACL_TYPE_T acl_type_t
|
|
|
|
/* Types of ACLs. */
|
|
#define SMB_ACL_USER ACL_USER
|
|
#define SMB_ACL_USER_OBJ ACL_USER_OBJ
|
|
#define SMB_ACL_GROUP ACL_GROUP
|
|
#define SMB_ACL_GROUP_OBJ ACL_GROUP_OBJ
|
|
#define SMB_ACL_OTHER ACL_OTHER_OBJ
|
|
#define SMB_ACL_MASK ACL_MASK
|
|
|
|
typedef struct SMB_ACL_T {
|
|
int next;
|
|
BOOL freeaclp;
|
|
struct acl *aclp;
|
|
} *SMB_ACL_T;
|
|
|
|
#define SMB_ACL_ENTRY_T acl_entry_t
|
|
|
|
#define SMB_ACL_FIRST_ENTRY 0
|
|
#define SMB_ACL_NEXT_ENTRY 1
|
|
|
|
#define SMB_ACL_TYPE_ACCESS ACL_TYPE_ACCESS
|
|
#define SMB_ACL_TYPE_DEFAULT ACL_TYPE_DEFAULT
|
|
|
|
#define SMB_ACL_VALID_NAME_BITS (4 | 2 | 1)
|
|
#define SMB_ACL_VALID_OBJ_BITS (4 | 2 | 1)
|
|
|
|
#define SMB_ACL_NEED_SORT
|
|
|
|
#elif defined HAVE_AIX_ACLS /*-----------------------------------------------*/
|
|
|
|
/* Donated by Medha Date, mdate@austin.ibm.com, for IBM */
|
|
|
|
#include "/usr/include/acl.h"
|
|
|
|
struct acl_entry_link{
|
|
struct acl_entry_link *prevp;
|
|
struct new_acl_entry *entryp;
|
|
struct acl_entry_link *nextp;
|
|
int count;
|
|
};
|
|
|
|
struct new_acl_entry{
|
|
unsigned short ace_len;
|
|
unsigned short ace_type;
|
|
unsigned int ace_access;
|
|
struct ace_id ace_id[1];
|
|
};
|
|
|
|
#define SMB_ACL_ENTRY_T struct new_acl_entry*
|
|
#define SMB_ACL_T struct acl_entry_link*
|
|
|
|
#define SMB_ACL_TAG_T unsigned short
|
|
#define SMB_ACL_TYPE_T int
|
|
|
|
/* Types of ACLs. */
|
|
#define SMB_ACL_USER ACEID_USER
|
|
#define SMB_ACL_USER_OBJ 3
|
|
#define SMB_ACL_GROUP ACEID_GROUP
|
|
#define SMB_ACL_GROUP_OBJ 4
|
|
#define SMB_ACL_OTHER 5
|
|
#define SMB_ACL_MASK 6
|
|
|
|
#define SMB_ACL_FIRST_ENTRY 1
|
|
#define SMB_ACL_NEXT_ENTRY 2
|
|
|
|
#define SMB_ACL_TYPE_ACCESS 0
|
|
#define SMB_ACL_TYPE_DEFAULT 1
|
|
|
|
#define SMB_ACL_VALID_NAME_BITS (4 | 2 | 1)
|
|
#define SMB_ACL_VALID_OBJ_BITS (4 | 2 | 1)
|
|
|
|
#define SMB_ACL_NEED_SORT
|
|
|
|
#elif defined(HAVE_OSX_ACLS) /*----------------------------------------------*/
|
|
|
|
/* Special handling for OS X ACLs */
|
|
|
|
#define SMB_ACL_TAG_T acl_tag_t
|
|
#define SMB_ACL_TYPE_T acl_type_t
|
|
|
|
#define SMB_ACL_T acl_t
|
|
|
|
#define SMB_ACL_ENTRY_T acl_entry_t
|
|
|
|
#define SMB_ACL_USER 1
|
|
#define SMB_ACL_GROUP 2
|
|
|
|
#define SMB_ACL_FIRST_ENTRY ACL_FIRST_ENTRY
|
|
#define SMB_ACL_NEXT_ENTRY ACL_NEXT_ENTRY
|
|
|
|
#define SMB_ACL_TYPE_ACCESS ACL_TYPE_EXTENDED
|
|
#define SMB_ACL_TYPE_DEFAULT ACL_TYPE_DEFAULT
|
|
|
|
#define SMB_ACL_VALID_NAME_BITS ((1<<25)-1)
|
|
#define SMB_ACL_VALID_OBJ_BITS 0
|
|
|
|
/*#undef SMB_ACL_NEED_SORT*/
|
|
|
|
#else /*---------------------------------------------------------------------*/
|
|
|
|
/* Unknown platform. */
|
|
|
|
#error Cannot handle ACLs on this platform!
|
|
|
|
#endif
|
|
|
|
int sys_acl_get_entry(SMB_ACL_T the_acl, int entry_id, SMB_ACL_ENTRY_T *entry_p);
|
|
int sys_acl_get_tag_type(SMB_ACL_ENTRY_T entry_d, SMB_ACL_TAG_T *tag_type_p);
|
|
int sys_acl_get_info(SMB_ACL_ENTRY_T entry, SMB_ACL_TAG_T *tag_type_p, uint32 *bits_p, id_t *u_g_id_p);
|
|
SMB_ACL_T sys_acl_get_file(const char *path_p, SMB_ACL_TYPE_T type);
|
|
SMB_ACL_T sys_acl_get_fd(int fd);
|
|
SMB_ACL_T sys_acl_init(int count);
|
|
int sys_acl_create_entry(SMB_ACL_T *pacl, SMB_ACL_ENTRY_T *pentry);
|
|
int sys_acl_set_info(SMB_ACL_ENTRY_T entry, SMB_ACL_TAG_T tagtype, uint32 bits, id_t u_g_id);
|
|
int sys_acl_set_access_bits(SMB_ACL_ENTRY_T entry, uint32 bits);
|
|
int sys_acl_valid(SMB_ACL_T theacl);
|
|
int sys_acl_set_file(const char *name, SMB_ACL_TYPE_T acltype, SMB_ACL_T theacl);
|
|
int sys_acl_set_fd(int fd, SMB_ACL_T theacl);
|
|
int sys_acl_delete_def_file(const char *name);
|
|
int sys_acl_free_acl(SMB_ACL_T the_acl);
|
|
int no_acl_syscall_error(int err);
|
|
|
|
#endif /* SUPPORT_ACLS */
|