libs/newlib-cygwin
libs/newlib-cygwin
4
0
Fork 0
mirror of git://sourceware.org/git/newlib-cygwin.git synced 2025-02-28 20:15:24 +08:00
Code Issues Projects Releases Wiki Activity

get_posix_access: Skip merging permissions if user can't get more permissions

Browse Source 
* sec_acl.cc (get_posix_access): Skip merging permissions if current
        user has rwx permissions anywa, or if the sum of all group and other
        permissions is less than or equal to the user's permissions.

Signed-off-by: Corinna Vinschen <corinna@vinschen.de>
This commit is contained in:
Corinna Vinschen 2015-11-10 10:00:33 +01:00
parent 0fbc4d7589
commit b75ad36741
2 changed files with 17 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
winsup/cygwin/ChangeLog
View File

@ -1,3 +1,9 @@
2015-11-10 Corinna Vinschen <corinna@vinschen.de>
* sec_acl.cc (get_posix_access): Skip merging permissions if current
user has rwx permissions anywa, or if the sum of all group and other
permissions is less than or equal to the user's permissions.
2015-11-10 Corinna Vinschen <corinna@vinschen.de> 2015-11-10 Corinna Vinschen <corinna@vinschen.de>
* sec_acl.cc (get_posix_access): Call authz_get_user_attribute on * sec_acl.cc (get_posix_access): Call authz_get_user_attribute on

13
winsup/cygwin/sec_acl.cc
View File

@ -1019,8 +1019,17 @@ get_posix_access (PSECURITY_DESCRIPTOR psd,
{ {
mode_t perm; mode_t perm;
/* If we use the Windows user DB, utilize Authz to make sure all /* Don't merge if the user already has all permissions, or... */
user permissions are correctly reflecting the Windows if (lacl[idx].a_perm == S_IRWXO)
continue;
/* ...if the sum of perms is less than or equal the user's perms. */
perm = lacl[idx].a_perm
| (has_class_perm ? class_perm : lacl[1].a_perm)
| lacl[2].a_perm;
if (perm == lacl[idx].a_perm)
continue;
/* Otherwise, if we use the Windows user DB, utilize Authz to make
sure all user permissions are correctly reflecting the Windows
permissions. */ permissions. */
if (cygheap->pg.nss_pwd_db () if (cygheap->pg.nss_pwd_db ()
&& authz_get_user_attribute (&perm, psd, aclsid[idx])) && authz_get_user_attribute (&perm, psd, aclsid[idx]))