]> git.ipfire.org Git - thirdparty/samba.git/commit
CVE-2020-25722 dsdb: objectclass computer becomes UF_WORKSTATION_TRUST by default
authorAndrew Bartlett <abartlet@samba.org>
Wed, 15 Sep 2021 20:46:42 +0000 (08:46 +1200)
committerJule Anger <janger@samba.org>
Tue, 9 Nov 2021 19:45:32 +0000 (19:45 +0000)
commite5b94eea6a9d78b53ec34eb32d8ab5c94d78d151
tree6c2eb7767b8d67cededa2d601b386c9a1d8a3f08
parent755e8a53ce041cc3e448fb0579b430db847bd0a0
CVE-2020-25722 dsdb: objectclass computer becomes UF_WORKSTATION_TRUST by default

There are a lot of knownfail entries added with this commit.  These
all need to be addressed and removed in subsequent commits which
will restructure the tests to pass within this new reality.

This default applies even to users with administrator rights,
as changing the default based on permissions would break
to many assumptions.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14753

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
selftest/knownfail.d/uac_objectclass_restrict [new file with mode: 0644]
source4/dsdb/samdb/ldb_modules/samldb.c