s3: smbd: smb2-posix: Add SAMBA_XATTR_REPARSE_ATTRIB "user.SmbReparse" name.

Ensure it's prohibited for normal user access.

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>

diff --git a/source3/include/smb.h b/source3/include/smb.h
index e47ccd6613366adacdcf9d208ca3907cd06ecbce..7f3482fe442bc2bcb0f7485dd80970faf186cbfb 100644 (file)
--- a/source3/include/smb.h
+++ b/source3/include/smb.h
@@ -614,6 +614,8 @@ struct ea_list {
 #define SAMBA_XATTR_DOSSTREAM_PREFIX "user.DosStream."
 /* Prefix for xattrs storing streams. */
 #define SAMBA_XATTR_MARKER "user.SAMBA_STREAMS"
+/* EA to use to store reparse points. */
+#define SAMBA_XATTR_REPARSE_ATTRIB "user.SmbReparse"
 
 /* usershare error codes. */
 enum usershare_err {

diff --git a/source3/smbd/smb2_trans2.c b/source3/smbd/smb2_trans2.c
index 5198a04a74c6bc542893bcc0345e541a5503a118..b43f8f6330a470553dab683f1472131055ed5793 100644 (file)
--- a/source3/smbd/smb2_trans2.c
+++ b/source3/smbd/smb2_trans2.c
@@ -164,6 +164,7 @@ bool samba_private_attr_name(const char *unix_ea_name)
        prohibited |= strequal(unix_ea_name, SAMBA_POSIX_INHERITANCE_EA_NAME);
        prohibited |= strequal(unix_ea_name, SAMBA_XATTR_DOS_ATTRIB);
        prohibited |= strequal(unix_ea_name, SAMBA_XATTR_MARKER);
+       prohibited |= strequal(unix_ea_name, SAMBA_XATTR_REPARSE_ATTRIB);
        prohibited |= strequal(unix_ea_name, XATTR_NTACL_NAME);
        prohibited |= strequal(unix_ea_name, AFPINFO_EA_NETATALK);