CVE-2023-0614 lib/ldb-samba: Add test for SAMBA_LDAP_MATCH_RULE_TRANSITIVE_EVAL ...
authorAndrew Bartlett <abartlet@samba.org>
Thu, 2 Mar 2023 03:51:25 +0000 (16:51 +1300)
committerJule Anger <janger@samba.org>
Mon, 20 Mar 2023 09:03:51 +0000 (10:03 +0100)
commitd564a5c816642269e0b6d0b37319fd47646487c0
treee263839f10357f29dc7bde4c2d3d32d369daa4f4
parentafad0829b16fa202723bb8381bb795e772d87edc
CVE-2023-0614 lib/ldb-samba: Add test for SAMBA_LDAP_MATCH_RULE_TRANSITIVE_EVAL / LDAP_MATCHING_RULE_IN_CHAIN with and ACL hidden attributes

The chain for transitive evaluation does consider ACLs, avoiding the disclosure of
confidential information.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15270

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
lib/ldb-samba/tests/match_rules.py
lib/ldb-samba/tests/match_rules_remote.py [new file with mode: 0755]
source4/selftest/tests.py