CVE-2023-0614 s4-acl: Avoid calling dsdb_module_am_system() if we can help it
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Mon, 27 Feb 2023 00:31:44 +0000 (13:31 +1300)
committerJule Anger <janger@samba.org>
Mon, 20 Mar 2023 09:03:38 +0000 (10:03 +0100)
commit353d3df3dd56e691b6a968c9b716f2a31e8bcfc4
tree5da7c1b66ac4c7be008fb79f33039d72e3caaace
parent9447c4e81e04df5b8d775fb62f3440f0d9076002
CVE-2023-0614 s4-acl: Avoid calling dsdb_module_am_system() if we can help it

If the AS_SYSTEM control is present, we know we have system privileges,
and have no need to call dsdb_module_am_system().

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15270

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source4/dsdb/samdb/ldb_modules/acl_read.c