2 Unix SMB/Netbios implementation.
5 Copyright (C) Tim Potter 2000
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "se_access_check_utils.h"
24 void char_to_sid(struct dom_sid *sid, char *sid_str)
26 /* If it looks like a SID, call string_to_sid() else look it up
29 if (strncmp(sid_str, "S-", 2) == 0) {
30 string_to_sid(sid, sid_str);
32 struct winbindd_request request;
33 struct winbindd_response response;
35 /* Send off request */
38 ZERO_STRUCT(response);
40 fstrcpy(request.data.name, sid_str);
41 if (winbindd_request(WINBINDD_LOOKUPNAME, &request,
42 &response) != NSS_STATUS_SUCCESS) {
43 printf("FAIL: unable to look up sid for name %s\n",
48 string_to_sid(sid, response.data.sid.sid);
49 printf("converted char %s to sid %s\n", sid_str,
50 response.data.sid.sid);
54 /* Construct an ACL from a list of ace_entry structures */
56 SEC_ACL *build_acl(struct ace_entry *ace_list)
62 if (ace_list == NULL) return NULL;
66 while(ace_list->sid) {
70 /* Create memory for new ACE */
72 if (!(aces = Realloc(aces,
73 sizeof(SEC_ACE) * (num_aces + 1)))) {
79 init_sec_access(&sa, ace_list->mask);
81 char_to_sid(&sid, ace_list->sid);
82 init_sec_ace(&aces[num_aces], &sid, ace_list->type,
89 /* Create ACL from list of ACEs */
91 result = make_sec_acl(ACL_REVISION, num_aces, aces);
97 /* Make a security descriptor */
99 SEC_DESC *build_sec_desc(struct ace_entry *dacl, struct ace_entry *sacl,
100 char *owner_sid, char *group_sid)
102 struct dom_sid the_owner_sid, the_group_sid;
103 SEC_ACL *the_dacl, *the_sacl;
107 /* Build up bits of security descriptor */
109 char_to_sid(&the_owner_sid, owner_sid);
110 char_to_sid(&the_group_sid, group_sid);
112 the_dacl = build_acl(dacl);
113 the_sacl = build_acl(sacl);
115 result = make_sec_desc(SEC_DESC_REVISION,
116 SEC_DESC_SELF_RELATIVE | SEC_DESC_DACL_PRESENT,
117 &the_owner_sid, &the_group_sid,
118 the_sacl, the_dacl, &size);
120 free_sec_acl(&the_dacl);
121 free_sec_acl(&the_sacl);
126 /* Iterate over password database and call a user-specified function */
128 void visit_pwdb(BOOL (*fn)(struct passwd *pw, int ngroups, gid_t *groups))
136 while ((pw = getpwent())) {
141 ngroups = getgroups(0, NULL);
143 groups = malloc(sizeof(gid_t) * ngroups);
144 getgroups(ngroups, groups);
148 result = fn(pw, ngroups, groups);