CVE-2016-2115: net: use SMB_SIGNING_IPC_DEFAULT

Use SMB_SIGNING_IPC_DEFAULT for RPC connections.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11756

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source3/utils/net_ads.c b/source3/utils/net_ads.c
index ace5b27d81bcf114306e4f90e744eabe1e327e6a..90af09edd3100919e09af8a7b2be5735a0dc88d1 100644 (file)
--- a/source3/utils/net_ads.c
+++ b/source3/utils/net_ads.c
@@ -1953,7 +1953,7 @@ static int net_ads_printer_publish(struct net_context *c, int argc, const char *
                                        c->opt_user_name, c->opt_workgroup,
                                        c->opt_password ? c->opt_password : "",
                                        CLI_FULL_CONNECTION_USE_KERBEROS,
-                                       SMB_SIGNING_DEFAULT);
+                                       SMB_SIGNING_IPC_DEFAULT);
 
        if (NT_STATUS_IS_ERR(nt_status)) {
                d_fprintf(stderr, _("Unable to open a connection to %s to "

diff --git a/source3/utils/net_rpc.c b/source3/utils/net_rpc.c
index 1de08c4fe2bb1354cba2b3a58f2e1e76d74e223c..93caf04681384703d5eff041a51d612e8f0a8617 100644 (file)
--- a/source3/utils/net_rpc.c
+++ b/source3/utils/net_rpc.c
@@ -7396,7 +7396,7 @@ bool net_rpc_check(struct net_context *c, unsigned flags)
                return false;
 
        status = cli_connect_nb(server_name, &server_ss, 0, 0x20,
-                               lp_netbios_name(), SMB_SIGNING_DEFAULT,
+                               lp_netbios_name(), SMB_SIGNING_IPC_DEFAULT,
                                0, &cli);
        if (!NT_STATUS_IS_OK(status)) {
                return false;

diff --git a/source3/utils/net_util.c b/source3/utils/net_util.c
index 13a0ef12d869fc938f92f952a584603624ccc270..de929ffd75d912dff2e04929885b3f5e7c1ed8a8 100644 (file)
--- a/source3/utils/net_util.c
+++ b/source3/utils/net_util.c
@@ -126,7 +126,7 @@ NTSTATUS connect_to_service(struct net_context *c,
                                        service_name, service_type,
                                        c->opt_user_name, c->opt_workgroup,
                                        c->opt_password, flags,
-                                       SMB_SIGNING_DEFAULT);
+                                       SMB_SIGNING_IPC_DEFAULT);
        if (!NT_STATUS_IS_OK(nt_status)) {
                d_fprintf(stderr, _("Could not connect to server %s\n"),
                          server_name);