2 * Unix SMB/Netbios implementation.
3 * SEC_ACL handling routines
4 * Copyright (C) Andrew Tridgell 1992-1998,
5 * Copyright (C) Jeremy R. Allison 1995-2003.
6 * Copyright (C) Luke Kenneth Casson Leighton 1996-1998,
7 * Copyright (C) Paul Ashton 1997-1998.
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with this program; if not, write to the Free Software
21 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
26 /*******************************************************************
27 Create a SEC_ACL structure.
28 ********************************************************************/
30 SEC_ACL
*make_sec_acl(TALLOC_CTX
*ctx
, uint16 revision
, int num_aces
, SEC_ACE
*ace_list
)
35 if((dst
= TALLOC_ZERO_P(ctx
,SEC_ACL
)) == NULL
)
38 dst
->revision
= revision
;
39 dst
->num_aces
= num_aces
;
40 dst
->size
= SEC_ACL_HEADER_SIZE
;
42 /* Now we need to return a non-NULL address for the ace list even
43 if the number of aces required is zero. This is because there
44 is a distinct difference between a NULL ace and an ace with zero
45 entries in it. This is achieved by checking that num_aces is a
49 ((dst
->aces
= TALLOC_ARRAY(ctx
, SEC_ACE
, num_aces
))
54 for (i
= 0; i
< num_aces
; i
++) {
55 dst
->aces
[i
] = ace_list
[i
]; /* Structure copy. */
56 dst
->size
+= ace_list
[i
].size
;
62 /*******************************************************************
63 Duplicate a SEC_ACL structure.
64 ********************************************************************/
66 SEC_ACL
*dup_sec_acl(TALLOC_CTX
*ctx
, SEC_ACL
*src
)
71 return make_sec_acl(ctx
, src
->revision
, src
->num_aces
, src
->aces
);
74 /*******************************************************************
75 Compares two SEC_ACL structures
76 ********************************************************************/
78 BOOL
sec_acl_equal(SEC_ACL
*s1
, SEC_ACL
*s2
)
84 if (!s1
&& !s2
) return True
;
85 if (!s1
|| !s2
) return False
;
87 /* Check top level stuff */
89 if (s1
->revision
!= s2
->revision
) {
90 DEBUG(10, ("sec_acl_equal(): revision differs (%d != %d)\n",
91 s1
->revision
, s2
->revision
));
95 if (s1
->num_aces
!= s2
->num_aces
) {
96 DEBUG(10, ("sec_acl_equal(): num_aces differs (%d != %d)\n",
97 s1
->revision
, s2
->revision
));
101 /* The ACEs could be in any order so check each ACE in s1 against
104 for (i
= 0; i
< s1
->num_aces
; i
++) {
107 for (j
= 0; j
< s2
->num_aces
; j
++) {
108 if (sec_ace_equal(&s1
->aces
[i
], &s2
->aces
[j
])) {
114 if (!found
) return False
;