gp: PAM Access should implicitly deny ALL w/ allow
commitca5f8072a4c7be6fdebef494664a27bbd73340ff
authorDavid Mulder <dmulder@samba.org>
Thu, 17 Nov 2022 23:33:24 +0000 (17 16:33 -0700)
committerJeremy Allison <jra@samba.org>
Mon, 21 Nov 2022 21:01:31 +0000 (21 21:01 +0000)
tree14d4bd939a1673959ba7849f5ead4d74185b68b8
parent9f6cf276e22b82601a81286fabeae5303f58339c
gp: PAM Access should implicitly deny ALL w/ allow

If an allow entry is specified, the PAM Access
CSE should implicitly deny ALL (everyone other
than the explicit allow entries).

Signed-off-by: David Mulder <dmulder@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
python/samba/gp/vgp_access_ext.py
python/samba/netcmd/gpo.py