CVE-2016-2115: net: use SMB_SIGNING_IPC_DEFAULT

Use SMB_SIGNING_IPC_DEFAULT for RPC connections.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11756

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source3/utils/net_ads.c b/source3/utils/net_ads.c
index 5f18bf4401a50fb90a3f1d98f772fb9e93f89d28..3d7d8a15dce192502bacf9aa9cc6777372623269 100644 (file)
--- a/source3/utils/net_ads.c
+++ b/source3/utils/net_ads.c
@@ -1907,7 +1907,7 @@ static int net_ads_printer_publish(struct net_context *c, int argc, const char *
                                        c->opt_user_name, c->opt_workgroup,
                                        c->opt_password ? c->opt_password : "",
                                        CLI_FULL_CONNECTION_USE_KERBEROS,
-                                       SMB_SIGNING_DEFAULT);
+                                       SMB_SIGNING_IPC_DEFAULT);
 
        if (NT_STATUS_IS_ERR(nt_status)) {
                d_fprintf(stderr, _("Unable to open a connection to %s to "

diff --git a/source3/utils/net_rpc.c b/source3/utils/net_rpc.c
index cd17b2cf1a227d8bacf6de0630ec282813cdde22..8f65a73b396bf9056711a3a2585be59bbf4ea91a 100644 (file)
--- a/source3/utils/net_rpc.c
+++ b/source3/utils/net_rpc.c
@@ -7395,7 +7395,7 @@ bool net_rpc_check(struct net_context *c, unsigned flags)
                return false;
 
        status = cli_connect_nb(server_name, &server_ss, 0, 0x20,
-                               lp_netbios_name(), SMB_SIGNING_DEFAULT,
+                               lp_netbios_name(), SMB_SIGNING_IPC_DEFAULT,
                                0, &cli);
        if (!NT_STATUS_IS_OK(status)) {
                return false;

diff --git a/source3/utils/net_util.c b/source3/utils/net_util.c
index 13a0ef12d869fc938f92f952a584603624ccc270..de929ffd75d912dff2e04929885b3f5e7c1ed8a8 100644 (file)
--- a/source3/utils/net_util.c
+++ b/source3/utils/net_util.c
@@ -126,7 +126,7 @@ NTSTATUS connect_to_service(struct net_context *c,
                                        service_name, service_type,
                                        c->opt_user_name, c->opt_workgroup,
                                        c->opt_password, flags,
-                                       SMB_SIGNING_DEFAULT);
+                                       SMB_SIGNING_IPC_DEFAULT);
        if (!NT_STATUS_IS_OK(nt_status)) {
                d_fprintf(stderr, _("Could not connect to server %s\n"),
                          server_name);