CVE-2023-0614 lib/ldb-samba: Add test for SAMBA_LDAP_MATCH_RULE_TRANSITIVE_EVAL ...
authorAndrew Bartlett <abartlet@samba.org>
Thu, 2 Mar 2023 03:51:25 +0000 (16:51 +1300)
committerJule Anger <janger@samba.org>
Mon, 20 Mar 2023 09:03:38 +0000 (10:03 +0100)
commit19785d023e3524f7aa3fa2ad707432b51076d56e
treec3849a4e8dbbeb1a51af58213f2ccd9065527cee
parent979997992a436cd32d1818e1c6c94faeedfe2b9f
CVE-2023-0614 lib/ldb-samba: Add test for SAMBA_LDAP_MATCH_RULE_TRANSITIVE_EVAL / LDAP_MATCHING_RULE_IN_CHAIN with and ACL hidden attributes

The chain for transitive evaluation does consider ACLs, avoiding the disclosure of
confidential information.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15270

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
lib/ldb-samba/tests/match_rules.py
lib/ldb-samba/tests/match_rules_remote.py [new file with mode: 0755]
source4/selftest/tests.py