r23784: use the GPLv3 boilerplate as recommended by the FSF and the license text
[jra/samba/.git] / source3 / libads / disp_sec.c
1 /* 
2    Unix SMB/CIFS implementation.
3    Samba utility functions. ADS stuff
4    Copyright (C) Alexey Kotovich 2002
5    
6    This program is free software; you can redistribute it and/or modify
7    it under the terms of the GNU General Public License as published by
8    the Free Software Foundation; either version 3 of the License, or
9    (at your option) any later version.
10    
11    This program is distributed in the hope that it will be useful, 
12    but WITHOUT ANY WARRANTY; without even the implied warranty of
13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14    GNU General Public License for more details.
15    
16    You should have received a copy of the GNU General Public License
17    along with this program.  If not, see <http://www.gnu.org/licenses/>.
18 */
19
20 #include "includes.h"
21
22 static struct perm_mask_str {
23         uint32  mask;
24         const char   *str;
25 } perms[] = {
26         {SEC_RIGHTS_FULL_CTRL,          "[Full Control]"},
27
28         {SEC_RIGHTS_LIST_CONTENTS,      "[List Contents]"},
29         {SEC_RIGHTS_LIST_OBJECT,        "[List Object]"},
30
31         {SEC_RIGHTS_READ_ALL_PROP,      "[Read All Properties]"},       
32         {SEC_RIGHTS_READ_PERMS,         "[Read Permissions]"},  
33
34         {SEC_RIGHTS_WRITE_ALL_VALID,    "[All validate writes]"},
35         {SEC_RIGHTS_WRITE_ALL_PROP,     "[Write All Properties]"},
36
37         {SEC_RIGHTS_MODIFY_PERMS,       "[Modify Permissions]"},
38         {SEC_RIGHTS_MODIFY_OWNER,       "[Modify Owner]"},
39
40         {SEC_RIGHTS_CREATE_CHILD,       "[Create All Child Objects]"},
41
42         {SEC_RIGHTS_DELETE,             "[Delete]"},
43         {SEC_RIGHTS_DELETE_SUBTREE,     "[Delete Subtree]"},
44         {SEC_RIGHTS_DELETE_CHILD,       "[Delete All Child Objects]"},
45
46         {SEC_RIGHTS_CHANGE_PASSWD,      "[Change Password]"},   
47         {SEC_RIGHTS_RESET_PASSWD,       "[Reset Password]"},
48
49         {SEC_RIGHTS_APPLY_GROUP_POLICY, "[Apply Group Policy]"},
50
51         {0,                             0}
52 };
53
54 /* convert a security permissions into a string */
55 static void ads_disp_perms(uint32 type)
56 {
57         int i = 0;
58         int j = 0;
59
60         printf("Permissions: ");
61         
62         if (type == SEC_RIGHTS_FULL_CTRL) {
63                 printf("%s\n", perms[j].str);
64                 return;
65         }
66
67         for (i = 0; i < 32; i++) {
68                 if (type & (1 << i)) {
69                         for (j = 1; perms[j].str; j ++) {
70                                 if (perms[j].mask == (((unsigned) 1) << i)) {
71                                         printf("\n\t%s (0x%08x)", perms[j].str, perms[j].mask);
72                                 }       
73                         }
74                         type &= ~(1 << i);
75                 }
76         }
77
78         /* remaining bits get added on as-is */
79         if (type != 0) {
80                 printf("[%08x]", type);
81         }
82         puts("");
83 }
84
85 /* display ACE */
86 static void ads_disp_ace(SEC_ACE *sec_ace)
87 {
88         const char *access_type = "UNKNOWN";
89
90         if (!sec_ace_object(sec_ace->type)) {
91                 printf("------- ACE (type: 0x%02x, flags: 0x%02x, size: 0x%02x, mask: 0x%x)\n", 
92                   sec_ace->type,
93                   sec_ace->flags,
94                   sec_ace->size,
95                   sec_ace->access_mask);                        
96         } else {
97                 printf("------- ACE (type: 0x%02x, flags: 0x%02x, size: 0x%02x, mask: 0x%x, object flags: 0x%x)\n", 
98                   sec_ace->type,
99                   sec_ace->flags,
100                   sec_ace->size,
101                   sec_ace->access_mask,
102                   sec_ace->object.object.flags);
103         }
104         
105         if (sec_ace->type == SEC_ACE_TYPE_ACCESS_ALLOWED) {
106                 access_type = "ALLOWED";
107         } else if (sec_ace->type == SEC_ACE_TYPE_ACCESS_DENIED) {
108                 access_type = "DENIED";
109         } else if (sec_ace->type == SEC_ACE_TYPE_SYSTEM_AUDIT) {
110                 access_type = "SYSTEM AUDIT";
111         } else if (sec_ace->type == SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECT) {
112                 access_type = "ALLOWED OBJECT";
113         } else if (sec_ace->type == SEC_ACE_TYPE_ACCESS_DENIED_OBJECT) {
114                 access_type = "DENIED OBJECT";
115         } else if (sec_ace->type == SEC_ACE_TYPE_SYSTEM_AUDIT_OBJECT) {
116                 access_type = "AUDIT OBJECT";
117         }
118
119         printf("access SID:  %s\naccess type: %s\n", 
120                sid_string_static(&sec_ace->trustee), access_type);
121
122         ads_disp_perms(sec_ace->access_mask);
123 }
124
125 /* display ACL */
126 static void ads_disp_acl(SEC_ACL *sec_acl, const char *type)
127 {
128         if (!sec_acl)
129                 printf("------- (%s) ACL not present\n", type);
130         else {
131                 printf("------- (%s) ACL (revision: %d, size: %d, number of ACEs: %d)\n", 
132                        type,
133                        sec_acl->revision,
134                        sec_acl->size,
135                        sec_acl->num_aces);                      
136         }
137 }
138
139 /* display SD */
140 void ads_disp_sd(SEC_DESC *sd)
141 {
142         int i;
143         
144         printf("-------------- Security Descriptor (revision: %d, type: 0x%02x)\n", 
145                sd->revision,
146                sd->type);
147         printf("owner SID: %s\n", sid_string_static(sd->owner_sid));
148         printf("group SID: %s\n", sid_string_static(sd->group_sid));
149
150         ads_disp_acl(sd->sacl, "system");
151         for (i = 0; i < sd->sacl->num_aces; i ++)
152                 ads_disp_ace(&sd->sacl->aces[i]);
153         
154         ads_disp_acl(sd->dacl, "user");
155         for (i = 0; i < sd->dacl->num_aces; i ++)
156                 ads_disp_ace(&sd->dacl->aces[i]);
157
158         printf("-------------- End Of Security Descriptor\n");
159 }
160
161