]> git.ipfire.org Git - thirdparty/samba.git/commit
CVE-2018-14628: python:descriptor: add get_deletedobjects_descriptor()
authorStefan Metzmacher <metze@samba.org>
Fri, 29 Jan 2016 22:30:59 +0000 (23:30 +0100)
committerJule Anger <janger@samba.org>
Mon, 23 Oct 2023 08:39:12 +0000 (08:39 +0000)
commite884fc791e59bd6ebd41b4a2ab7c9d7dc45415f4
treea7d09a4c2023f189d1acc211c10a114a56784ed8
parent8e33532980d9b4b16520a5092336bd86f882e0f5
CVE-2018-14628: python:descriptor: add get_deletedobjects_descriptor()

samba-tool drs clone-dc-database was quite useful to find
the true value of nTSecurityDescriptor of the CN=Delete Objects
containers.

Only the auto inherited SACL is available via a ldap search.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13595

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit 3be190dcf7153e479383f7f3d29ddca43fe121b8)
python/samba/descriptor.py