diff options
| author | Corinna Vinschen <corinna@vinschen.de> | 2015-09-02 00:05:46 +0200 |
|---|---|---|
| committer | Corinna Vinschen <corinna@vinschen.de> | 2015-11-18 22:30:38 +0100 |
| commit | 911808dd5e86f054ec668b04366b6357885d6b85 (patch) | |
| tree | 6a2589c1db5ac57b96d557f4b6b536a5c66fba0b /winsup/cygwin/ChangeLog | |
| parent | 7edb6b8d3e817cfb0f4c82dc9d383498d34d5380 (diff) | |
| download | newlib-911808dd5e86f054ec668b04366b6357885d6b85.zip newlib-911808dd5e86f054ec668b04366b6357885d6b85.tar.gz newlib-911808dd5e86f054ec668b04366b6357885d6b85.tar.bz2 | |
Fix permission evaluation for !new_style ACLs
* security.h (authz_get_user_attribute): Declare bool.
* sec_helper.cc (authz_ctx::get_user_attribute): Make bool method.
Set S_IxOTH bits in returned attributes rather than S_IxUSR bits.
(authz_get_user_attribute): Make bool function.
* sec_acl.cc (get_posix_access): Introduce cygsid array to keep
track of all SIDs in the ACL. Move AuthZ calls into !new_style
permission post processing. When not using AuthZ, use
CheckTokenMembership to collect group permissions.
Signed-off-by: Corinna Vinschen <corinna@vinschen.de>
Diffstat (limited to 'winsup/cygwin/ChangeLog')
| -rw-r--r-- | winsup/cygwin/ChangeLog | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/winsup/cygwin/ChangeLog b/winsup/cygwin/ChangeLog index 396ce2e..690d5bc 100644 --- a/winsup/cygwin/ChangeLog +++ b/winsup/cygwin/ChangeLog @@ -1,5 +1,16 @@ 2015-11-18 Corinna Vinschen <corinna@vinschen.de> + * security.h (authz_get_user_attribute): Declare bool. + * sec_helper.cc (authz_ctx::get_user_attribute): Make bool method. + Set S_IxOTH bits in returned attributes rather than S_IxUSR bits. + (authz_get_user_attribute): Make bool function. + * sec_acl.cc (get_posix_access): Introduce cygsid array to keep + track of all SIDs in the ACL. Move AuthZ calls into !new_style + permission post processing. When not using AuthZ, use + CheckTokenMembership to collect group permissions. + +2015-11-18 Corinna Vinschen <corinna@vinschen.de> + * fhandler_disk_file.cc (fhandler_disk_file::fchmod): Disable deviation from POSIX 1003.1e in terms of GROUP_OBJ/CLASS_OBJ permissions. Follow POSIX 1003.1e again. Keep old code in |