From: Jeremy Allison <jra@samba.org>
Date: Fri, 4 Jun 2021 00:37:57 +0000 (-0700)
Subject: s3: smbd: Fix smbd_check_access_rights_fsp() to cope with fake/printer fsp's.
X-Git-Tag: tevent-0.11.0~636
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c11f25b7ea132979ff0070ac4b29439ec3c9a279;p=thirdparty%2Fsamba.git

s3: smbd: Fix smbd_check_access_rights_fsp() to cope with fake/printer fsp's.

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
---

diff --git a/source3/smbd/open.c b/source3/smbd/open.c
index b1d90412bf1..fc15e66ea0a 100644
--- a/source3/smbd/open.c
+++ b/source3/smbd/open.c
@@ -287,6 +287,14 @@ NTSTATUS smbd_check_access_rights_fsp(struct files_struct *fsp,
 	struct security_descriptor *sd = NULL;
 	NTSTATUS status;
 
+	/* Cope with fake/printer fsp's. */
+	if (fsp->fake_file_handle != NULL || fsp->print_file != NULL) {
+		if ((fsp->access_mask & access_mask) != access_mask) {
+			return NT_STATUS_ACCESS_DENIED;
+		}
+		return NT_STATUS_OK;
+	}
+
 	status = SMB_VFS_FGET_NT_ACL(fsp,
 				     (SECINFO_OWNER |
 				      SECINFO_GROUP |