]> git.ipfire.org Git - thirdparty/samba.git/commit
CVE-2023-4154 python:sd_utils: add dacl_{prepend,append,delete}_aces() helpers
authorStefan Metzmacher <metze@samba.org>
Thu, 16 Mar 2023 17:03:10 +0000 (18:03 +0100)
committerJule Anger <janger@samba.org>
Mon, 9 Oct 2023 20:16:07 +0000 (22:16 +0200)
commitd038ac36c13b5eb8f17491c9c066d3111a8f7d79
tree1d95c2710b52236043215579b700a0da4ab2fdee
parent60baeea804aeaf9a2ea618d14985a9b7560e03a7
CVE-2023-4154 python:sd_utils: add dacl_{prepend,append,delete}_aces() helpers

They better represent what they are doing, we keep dacl_add_ace()
as wrapper of dacl_prepend_aces() in order to let existing callers
work as before.

In future it would be good to have a dacl_insert_aces() that
would canonicalize the ace order before storing, but that a task
for another day.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15424

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
(cherry picked from commit a1109a9bf12e020636b8d66fc54984aac58bfe6b)
python/samba/sd_utils.py