Commits on Source (10)
-
Karolin Seeger authored
and re-eanble GIT_SNAPSHOT. Signed-off-by:
Karolin Seeger <kseeger@samba.org> (cherry picked from commit baafb6fc060c0b61f3e744c041be871303fa9c66)
-
Jeremy Allison authored
Will be called on elsewhere on successful impersonation. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14035 Signed-off-by:
Jeremy Allison <jra@samba.org> Reviewed-by:
Ralph Boehme <slow@samba.org> Reviewed-by:
Stefan Metzmacher <metze@samba.org>
-
Stefan Metzmacher authored
CVE-2019-10197: smbd: make sure that change_to_user_internal() always resets current_user.done_chdir We should not leave current_user.done_chdir as true if we didn't call chdir_current_service() with success. This caused problems in when calling vfs_ChDir() in pop_conn_ctx() when chdir_current_service() worked once on one share but later failed on another share. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14035 Signed-off-by:
Stefan Metzmacher <metze@samba.org> Reviewed-by:
Ralph Boehme <slow@samba.org>
-
Stefan Metzmacher authored
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14035 Signed-off-by:
Stefan Metzmacher <metze@samba.org>
-
Stefan Metzmacher authored
The next patch will otherwise break the fsrvp related tests. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14035 Signed-off-by:
Stefan Metzmacher <metze@samba.org>
-
Stefan Metzmacher authored
CVE-2019-10197: test_smbclient_s3.sh: add regression test for the no permission on share root problem BUG: https://bugzilla.samba.org/show_bug.cgi?id=14035 Signed-off-by:
Stefan Metzmacher <metze@samba.org>
-
Stefan Metzmacher authored
This makes sure we always call chdir_current_service() even when we still impersonated the user. Which is important in order to run the SMB* request within the correct working directory and only if the user has permissions to enter that directory. It makes sure we always update conn->lastused_count in chdir_current_service() for each request. Note that vfs_ChDir() (called from chdir_current_service()) maintains its own cache and avoids calling SMB_VFS_CHDIR() if possible. It means we still avoid syscalls if we get a multiple requests for the same session/tcon tuple. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14035 Signed-off-by:
Stefan Metzmacher <metze@samba.org> Reviewed-by:
Ralph Boehme <slow@samba.org>
-
Karolin Seeger authored
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14035 CVE-2019-10197 [SECURITY][EMBARGOED] permissions check deny can allow user to escape from the share. Signed-off-by:
Karolin Seeger <kseeger@samba.org>
-
Karolin Seeger authored
Signed-off-by:
Karolin Seeger <kseeger@samba.org>
-
Mathieu Parent authored