CVE-2023-0614 lib/ldb-samba: Add test for SAMBA_LDAP_MATCH_RULE_TRANSITIVE_EVAL ...
authorAndrew Bartlett <abartlet@samba.org>
Thu, 2 Mar 2023 03:51:25 +0000 (16:51 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Wed, 5 Apr 2023 02:10:35 +0000 (02:10 +0000)
commit9b8dd83fd0270a25b24bec87fce25c965c6ad7a0
tree3fc2bbd2c7ac51f07b1bdb4ff33c5de657d52b32
parentf6e93e2b3d9b7e351f622a2275746474196ec2fa
CVE-2023-0614 lib/ldb-samba: Add test for SAMBA_LDAP_MATCH_RULE_TRANSITIVE_EVAL / LDAP_MATCHING_RULE_IN_CHAIN with and ACL hidden attributes

The chain for transitive evaluation does consider ACLs, avoiding the disclosure of
confidential information.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15270

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
lib/ldb-samba/tests/match_rules.py
lib/ldb-samba/tests/match_rules_remote.py [new file with mode: 0755]
source4/selftest/tests.py