]> git.ipfire.org Git - thirdparty/samba.git/commit
projects / thirdparty / samba.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 431c730) | patch
CVE-2022-38023 s3:rpc_server/netlogon: Check for global "server schannel require...
authorSamuel Cabrero <scabrero@suse.de>
Thu, 22 Dec 2022 10:05:33 +0000 (11:05 +0100)
committerJule Anger <janger@samba.org>
Mon, 23 Jan 2023 09:06:16 +0000 (09:06 +0000)
commitfea95d10a23c984872fd23e7ca49ff580ab3b125
tree627b194606b03feb23ffd617cdf5fa047f19ba3btree
parent431c730c6e773532dd2f9cace589a9028717d185commit | diff
CVE-2022-38023 s3:rpc_server/netlogon: Check for global "server schannel require seal"

By default we'll now require schannel connections with privacy/sealing/encryption.

But we allow exceptions for specific computer/trust accounts.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Samuel Cabrero <scabrero@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
(cherry picked from commit a0b97e262318dc56fe663da89b0ee3172b2e7848)
source3/rpc_server/netlogon/srv_netlog_nt.c diff | blob | blame | history
Mirror of https://github.com/samba-team/samba.git