4 * Copyright (C) Jim McDonough, 2006
5 * Major code contributions from Peter Somogyi, somogyi@de.ibm.com
6 * Reused & renamed some parts of AIX 5.3 sys/acl.h structures
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
23 #ifndef __NFS4_ACLS_H__
24 #define __NFS4_ACLS_H__
26 #define SMB_ACLTYPE_NONE 0
27 #define SMB_ACLTYPE_UNKNOWN 1
28 #define SMB_ACLTYPE_POSIX 2
29 #define SMB_ACLTYPE_NFS4 4
32 * Following union captures the identity as
33 * used in the NFS4 ACL structures.
35 typedef union _SMB_NFS4_ACEWHOID_T {
36 uid_t uid; /* User id */
37 gid_t gid; /* Group id */
38 uint32 special_id; /* Identifies special identities in NFS4 */
40 #define SMB_ACE4_WHO_OWNER 0x00000001 /*The owner of the file. */
41 #define SMB_ACE4_WHO_GROUP 0x00000002 /*The group associated with the file. */
42 #define SMB_ACE4_WHO_EVERYONE 0x00000003 /*The world. */
43 #define SMB_ACE4_WHO_INTERACTIVE 0x00000004 /*Accessed from an interactive terminal. */
44 #define SMB_ACE4_WHO_NETWORK 0x00000005 /*Accessed via the network. */
45 #define SMB_ACE4_WHO_DIALUP 0x00000006 /*Accessed as a dialup user to the server. */
46 #define SMB_ACE4_WHO_BATCH 0x00000007 /*Accessed from a batch job. */
47 #define SMB_ACE4_WHO_ANONYMOUS 0x00000008 /*Accessed without any authentication. */
48 #define SMB_ACE4_WHO_AUTHENTICATED 0x00000009 /*Any authenticated user (opposite of ANONYMOUS) */
49 #define SMB_ACE4_WHO_SERVICE 0x0000000A /*Access from a system service. */
50 #define SMB_ACE4_WHO_MAX SMB_ACE4_WHO_SERVICE /* largest valid ACE4_WHO */
52 } SMB_NFS4_ACEWHOID_T;
54 typedef struct _SMB_ACE4PROP_T {
55 uint32 flags; /* Bit mask defining details of ACE */
56 /*The following are constants for flags field */
57 /* #define SMB_ACE4_ID_NOT_VALID 0x00000001 - from aix/jfs2 */
58 #define SMB_ACE4_ID_SPECIAL 0x00000002
60 SMB_NFS4_ACEWHOID_T who; /* Identifies to whom this ACE applies */
62 /* The following part of ACE has the same layout as NFSv4 wire format. */
64 uint32 aceType; /* Type of ACE PERMIT/ALLOW etc*/
65 /*The constants used for the type field (acetype4) are as follows: */
66 #define SMB_ACE4_ACCESS_ALLOWED_ACE_TYPE 0x00000000
67 #define SMB_ACE4_ACCESS_DENIED_ACE_TYPE 0x00000001
68 #define SMB_ACE4_SYSTEM_AUDIT_ACE_TYPE 0x00000002
69 #define SMB_ACE4_SYSTEM_ALARM_ACE_TYPE 0x00000003
70 #define SMB_ACE4_MAX_TYPE ACE4_SYSTEM_ALARM_ACE_TYPE /* largest valid ACE4_TYPE */
72 uint32 aceFlags; /* Controls Inheritance and such */
73 /*The bitmask constants used for the flag field are as follows: */
74 #define SMB_ACE4_FILE_INHERIT_ACE 0x00000001
75 #define SMB_ACE4_DIRECTORY_INHERIT_ACE 0x00000002
76 #define SMB_ACE4_NO_PROPAGATE_INHERIT_ACE 0x00000004
77 #define SMB_ACE4_INHERIT_ONLY_ACE 0x00000008
78 #define SMB_ACE4_SUCCESSFUL_ACCESS_ACE_FLAG 0x00000010
79 #define SMB_ACE4_FAILED_ACCESS_ACE_FLAG 0x00000020
80 #define SMB_ACE4_IDENTIFIER_GROUP 0x00000040
81 #define SMB_ACE4_ALL_FLAGS ( SMB_ACE4_FILE_INHERIT_ACE | SMB_ACE4_DIRECTORY_INHERIT_ACE \
82 | SMB_ACE4_NO_PROPAGATE_INHERIT_ACE | SMB_ACE4_INHERIT_ONLY_ACE | SMB_ACE4_SUCCESSFUL_ACCESS_ACE_FLAG \
83 | SMB_ACE4_FAILED_ACCESS_ACE_FLAG | SMB_ACE4_IDENTIFIER_GROUP )
85 uint32 aceMask; /* Access rights */
86 /*The bitmask constants used for the access mask field are as follows: */
87 #define SMB_ACE4_READ_DATA 0x00000001
88 #define SMB_ACE4_LIST_DIRECTORY 0x00000001
89 #define SMB_ACE4_WRITE_DATA 0x00000002
90 #define SMB_ACE4_ADD_FILE 0x00000002
91 #define SMB_ACE4_APPEND_DATA 0x00000004
92 #define SMB_ACE4_ADD_SUBDIRECTORY 0x00000004
93 #define SMB_ACE4_READ_NAMED_ATTRS 0x00000008
94 #define SMB_ACE4_WRITE_NAMED_ATTRS 0x00000010
95 #define SMB_ACE4_EXECUTE 0x00000020
96 #define SMB_ACE4_DELETE_CHILD 0x00000040
97 #define SMB_ACE4_READ_ATTRIBUTES 0x00000080
98 #define SMB_ACE4_WRITE_ATTRIBUTES 0x00000100
99 #define SMB_ACE4_DELETE 0x00010000
100 #define SMB_ACE4_READ_ACL 0x00020000
101 #define SMB_ACE4_WRITE_ACL 0x00040000
102 #define SMB_ACE4_WRITE_OWNER 0x00080000
103 #define SMB_ACE4_SYNCHRONIZE 0x00100000
104 #define SMB_ACE4_ALL_MASKS ( SMB_ACE4_READ_DATA | SMB_ACE4_LIST_DIRECTORY \
105 | SMB_ACE4_WRITE_DATA | SMB_ACE4_ADD_FILE | SMB_ACE4_APPEND_DATA | SMB_ACE4_ADD_SUBDIRECTORY \
106 | SMB_ACE4_READ_NAMED_ATTRS | SMB_ACE4_WRITE_NAMED_ATTRS | SMB_ACE4_EXECUTE | SMB_ACE4_DELETE_CHILD \
107 | SMB_ACE4_READ_ATTRIBUTES | SMB_ACE4_WRITE_ATTRIBUTES | SMB_ACE4_DELETE | SMB_ACE4_READ_ACL \
108 | SMB_ACE4_WRITE_ACL | SMB_ACE4_WRITE_OWNER | SMB_ACE4_SYNCHRONIZE )
112 * Never allocate these structures on your own
113 * use create_smb4acl instead
115 typedef struct _SMB4ACL_T {char dontuse;} SMB4ACL_T;
116 typedef struct _SMB4ACE_T {char dontuse;} SMB4ACE_T;
118 SMB4ACL_T *smb_create_smb4acl(void);
120 /* prop's contents are copied */
121 /* it doesn't change the order, appends */
122 SMB4ACE_T *smb_add_ace4(SMB4ACL_T *acl, SMB_ACE4PROP_T *prop);
124 SMB_ACE4PROP_T *smb_get_ace4(SMB4ACE_T *ace);
126 /* Returns NULL if none - or error */
127 SMB4ACE_T *smb_first_ace4(SMB4ACL_T *acl);
129 /* Returns NULL in the end - or error */
130 SMB4ACE_T *smb_next_ace4(SMB4ACE_T *ace);
132 uint32 smb_get_naces(SMB4ACL_T *acl);
134 size_t smb_get_nt_acl_nfs4(files_struct *fsp,
135 uint32 security_info,
136 SEC_DESC **ppdesc, SMB4ACL_T *acl);
138 /* Callback function needed to set the native acl
140 typedef BOOL (*set_nfs4acl_native_fn_t)(files_struct *, SMB4ACL_T *);
142 BOOL smb_set_nt_acl_nfs4(files_struct *fsp,
143 uint32 security_info_sent,
145 set_nfs4acl_native_fn_t set_nfs4_native);