From: Douglas Bagnall Date: Thu, 1 Dec 2022 23:44:54 +0000 (+1300) Subject: librpc:security.idl: add more ACE enum types, with annotations X-Git-Tag: tevent-0.16.0~706 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=416f6ef72626bfc5619f2a17b8eb551e5e30602e;p=thirdparty%2Fsamba.git librpc:security.idl: add more ACE enum types, with annotations The callback types are used for conditional ACEs. The others are just there and we might as well know them. Several ACE types are "reserved for future use" by Microsoft. Signed-off-by: Douglas Bagnall Reviewed-by: Andrew Bartlett --- diff --git a/librpc/idl/security.idl b/librpc/idl/security.idl index e3e7e9c35cb..9e2fe5ed502 100644 --- a/librpc/idl/security.idl +++ b/librpc/idl/security.idl @@ -545,15 +545,34 @@ interface security } security_ace_flags; typedef [public,enum8bit] enum { + /* + * The following entries tagged *reserved* have been + * named and allocated by Microsoft but apparently not + * implemented (MS-DTYP 2.4.4.1). + * + * The entries marked *unused* are more or less + * completely ignored by Samba. + */ SEC_ACE_TYPE_ACCESS_ALLOWED = 0, SEC_ACE_TYPE_ACCESS_DENIED = 1, SEC_ACE_TYPE_SYSTEM_AUDIT = 2, - SEC_ACE_TYPE_SYSTEM_ALARM = 3, - SEC_ACE_TYPE_ALLOWED_COMPOUND = 4, + SEC_ACE_TYPE_SYSTEM_ALARM = 3, /* reserved */ + SEC_ACE_TYPE_ALLOWED_COMPOUND = 4, /* reserved */ SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECT = 5, SEC_ACE_TYPE_ACCESS_DENIED_OBJECT = 6, SEC_ACE_TYPE_SYSTEM_AUDIT_OBJECT = 7, - SEC_ACE_TYPE_SYSTEM_ALARM_OBJECT = 8 + SEC_ACE_TYPE_SYSTEM_ALARM_OBJECT = 8, /* reserved */ + SEC_ACE_TYPE_ACCESS_ALLOWED_CALLBACK = 9, + SEC_ACE_TYPE_ACCESS_DENIED_CALLBACK = 10, + SEC_ACE_TYPE_ACCESS_ALLOWED_CALLBACK_OBJECT = 11, + SEC_ACE_TYPE_ACCESS_DENIED_CALLBACK_OBJECT = 12, + SEC_ACE_TYPE_SYSTEM_AUDIT_CALLBACK = 13, + SEC_ACE_TYPE_SYSTEM_ALARM_CALLBACK = 14, /* reserved */ + SEC_ACE_TYPE_SYSTEM_AUDIT_CALLBACK_OBJECT = 15, + SEC_ACE_TYPE_SYSTEM_ALARM_CALLBACK_OBJECT = 16, /* reserved */ + SEC_ACE_TYPE_SYSTEM_MANDATORY_LABEL = 17, /*unused */ + SEC_ACE_TYPE_SYSTEM_RESOURCE_ATTRIBUTE = 18, + SEC_ACE_TYPE_SYSTEM_SCOPED_POLICY_ID = 19 /* unused */ } security_ace_type; typedef [bitmap32bit] bitmap {