2 Unix SMB/CIFS implementation.
3 client security descriptor functions
4 Copyright (C) Andrew Tridgell 2000
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
21 #include "libsmb/libsmb.h"
22 #include "../libcli/security/secdesc.h"
23 #include "../libcli/smb/smbXcli_base.h"
25 NTSTATUS
cli_query_security_descriptor(struct cli_state
*cli
,
29 struct security_descriptor
**sd
)
33 uint32_t rdata_count
=0;
35 struct security_descriptor
*lsd
;
37 if (smbXcli_conn_protocol(cli
->conn
) >= PROTOCOL_SMB2_02
) {
38 return cli_smb2_query_security_descriptor(cli
,
45 SIVAL(param
, 0, fnum
);
46 SIVAL(param
, 4, sec_info
);
48 status
= cli_trans(talloc_tos(), cli
, SMBnttrans
,
49 NULL
, -1, /* name, fid */
50 NT_TRANSACT_QUERY_SECURITY_DESC
, 0, /* function, flags */
51 NULL
, 0, 0, /* setup, length, max */
52 param
, 8, 4, /* param, length, max */
53 NULL
, 0, 0x10000, /* data, length, max */
54 NULL
, /* recv_flags2 */
55 NULL
, 0, NULL
, /* rsetup, length */
57 &rdata
, 0, &rdata_count
);
59 if (!NT_STATUS_IS_OK(status
)) {
60 DEBUG(1, ("NT_TRANSACT_QUERY_SECURITY_DESC failed: %s\n",
65 status
= unmarshall_sec_desc(mem_ctx
, (uint8_t *)rdata
, rdata_count
,
67 if (!NT_STATUS_IS_OK(status
)) {
68 DEBUG(10, ("unmarshall_sec_desc failed: %s\n",
86 NTSTATUS
cli_query_secdesc(struct cli_state
*cli
, uint16_t fnum
,
87 TALLOC_CTX
*mem_ctx
, struct security_descriptor
**sd
)
89 uint32_t sec_info
= SECINFO_OWNER
| SECINFO_GROUP
| SECINFO_DACL
;
91 return cli_query_security_descriptor(cli
, fnum
, sec_info
, mem_ctx
, sd
);
94 NTSTATUS
cli_query_mxac(struct cli_state
*cli
,
98 if (smbXcli_conn_protocol(cli
->conn
) < PROTOCOL_SMB2_02
) {
99 return NT_STATUS_NOT_SUPPORTED
;
102 return cli_smb2_query_mxac(cli
, filename
, mxac
);
106 /****************************************************************************
107 set the security descriptor for a open file
108 ****************************************************************************/
109 NTSTATUS
cli_set_security_descriptor(struct cli_state
*cli
,
112 const struct security_descriptor
*sd
)
119 if (smbXcli_conn_protocol(cli
->conn
) >= PROTOCOL_SMB2_02
) {
120 return cli_smb2_set_security_descriptor(cli
,
126 status
= marshall_sec_desc(talloc_tos(), sd
, &data
, &len
);
127 if (!NT_STATUS_IS_OK(status
)) {
128 DEBUG(10, ("marshall_sec_desc failed: %s\n",
133 SIVAL(param
, 0, fnum
);
134 SIVAL(param
, 4, sec_info
);
136 status
= cli_trans(talloc_tos(), cli
, SMBnttrans
,
137 NULL
, -1, /* name, fid */
138 NT_TRANSACT_SET_SECURITY_DESC
, 0,
139 NULL
, 0, 0, /* setup */
140 param
, 8, 0, /* param */
141 data
, len
, 0, /* data */
142 NULL
, /* recv_flags2 */
143 NULL
, 0, NULL
, /* rsetup */
144 NULL
, 0, NULL
, /* rparam */
145 NULL
, 0, NULL
); /* rdata */
147 if (!NT_STATUS_IS_OK(status
)) {
148 DEBUG(1, ("Failed to send NT_TRANSACT_SET_SECURITY_DESC: %s\n",
154 NTSTATUS
cli_set_secdesc(struct cli_state
*cli
, uint16_t fnum
,
155 const struct security_descriptor
*sd
)
157 uint32_t sec_info
= 0;
159 if (sd
->dacl
|| (sd
->type
& SEC_DESC_DACL_PRESENT
)) {
160 sec_info
|= SECINFO_DACL
;
162 if (sd
->sacl
|| (sd
->type
& SEC_DESC_SACL_PRESENT
)) {
163 sec_info
|= SECINFO_SACL
;
166 sec_info
|= SECINFO_OWNER
;
169 sec_info
|= SECINFO_GROUP
;
172 return cli_set_security_descriptor(cli
, fnum
, sec_info
, sd
);