search for: file_read_attribute

In map_nt_perms any of FILE_READ_DATA, FILE_READ_EA or FILE_READ_ATTRIBUTES is mapped unconditionally to Unix read permission and similarly for write permission This means that if I put a file on a samba share where I explicitly left *only* FILE_READ_ATTRIBUTES and FILE_READ_EA the file content becomes hiddenly readable also if I decided (for very good reasons) otherwise...

...SYNCHRONIZE WIN_2K: FILE_GENERIC_READ WIN_2K: FILE_READ_DATA WIN_2K: FILE_READ_EA WIN_2K: FILE_READ_ATTRIBUTES WIN_2K: WIN_2K: Everyone:(OI)(CI)(IO)(special access:) WIN_2K: READ_CONTROL WIN_2K: SYNCHRONIZE WIN_2K: FILE_GENERIC_READ WIN_2K: FILE_READ_DATA WIN_2K:...

Two attached patches for samba 2.2.7a and 3.0-alfa22, that I've made today, fix 3 bugs mentioned in my previous e-mail. 1) For each file in addition to ALLOW ACE proper DENY ACE is created. 2) "Take ownership" is shown DENIED for all except root ACEs 3) Read Permissions and read attributes are always shown as allowed, as they are actually allowed. -- Zhitomirsky

...ic this lock using GENERIC_READ with FILE_SHARE_READ: DENY_WRITE 0x20089 RDONLY and with GENERIC_EXECUTE with FILE_SHARE_READ DENY_WRITE 0x200a0 RDONLY and by simply putting the constant value FILE_EXECUTE DENY_WRITE 0xa0 RDONLY It seems like something is automatically ORing in FILE_READ_ATTRIBUTES into my desired_access, since FILE_EXECUTE is 0x20 and FILE_READ_ATTRIBUTES is 0x80. My goal is simply to open a file, read only, deny write, but allowing others to rename the file. Windows does this when you open an EXE and the lock is DENY_WRITE 0x20 RDONLY then file renames are pos...

...nd>(special access:) WRITE_OWNER <Account Domain not found>(special access:) READ_CONTROL SYNCHRONIZE FILE_GENERIC_READ FILE_READ_DATA FILE_READ_EA FILE_READ_ATTRIBUTES Everyone:F while the cacls output of the NT4 hosted file is: K:\Content.IE5\index.dat Everyone:(special access:) READ_CONTROL SYNCHRONIZE FILE_GENERIC_READ...

...on a directory handle when a condition such as "new file creation" or "file size change" or "file timestamp update" occurs. A missing permissions check on a directory handle requesting ChangeNotify meant that a client with a directory handle open only for FILE_READ_ATTRIBUTES (minimal access rights) could be used to obtain change notify replies from the server. These replies contain information that should not be available to directory handles open for FILE_READ_ATTRIBUTE only. o CVE-2020-14323: winbind in version 3.6 and later implements a request to transl...

...on a directory handle when a condition such as "new file creation" or "file size change" or "file timestamp update" occurs. A missing permissions check on a directory handle requesting ChangeNotify meant that a client with a directory handle open only for FILE_READ_ATTRIBUTES (minimal access rights) could be used to obtain change notify replies from the server. These replies contain information that should not be available to directory handles open for FILE_READ_ATTRIBUTE only. o CVE-2020-14323: winbind in version 3.6 and later implements a request to transl...

...FILE_READ_EA FILE_WRITE_EA FILE_READ_ATTRIBUTES FILE_WRITE_ATTRIBUTES Everyone:(special access:)...

Hi folks, I''ve got most everything done for the pure Ruby version of win32-file. The last thing left (since I''ll be moving the IO methods to a different package eventually) is the file security stuff. Here''s what I''ve got so far for the get_permissions method. However, I''m stuck at GetAce(). If someone could help me finish up this method, I

...or creating GL contexts. Jacek Caban (34): winegcc: Support distros using plain lib for 32-bit libraries in get_lib_dir. ntdll: Allow FileAccessInformation to be queried on files without fds. kernel32: Use proper access flags in CreatePipe. kernel32: Always create file with FILE_READ_ATTRIBUTES access in CreateFile. server: Require FILE_READ_ATTRIBUTES access in get_named_pipe_info. widl: Split write_value for string and int values. widl: Allow defaultvalue() attribute on any pointer type. mshtml: Store style property flags in an array and use it in set_nsstyle_at...