CVE-2023-4154 python:sd_utils: add dacl_{prepend,append,delete}_aces() helpers
authorStefan Metzmacher <metze@samba.org>
Thu, 16 Mar 2023 17:03:10 +0000 (18:03 +0100)
committerJule Anger <janger@samba.org>
Mon, 9 Oct 2023 20:15:19 +0000 (22:15 +0200)
commit8ebcfe5599c5540da2fdd161d5108275d22c959e
tree6d094a4e4824bea49331bdcafe763d1ba19bbe37
parentb65b141ed7572503fc896b5efd46b3a48ef847d1
CVE-2023-4154 python:sd_utils: add dacl_{prepend,append,delete}_aces() helpers

They better represent what they are doing, we keep dacl_add_ace()
as wrapper of dacl_prepend_aces() in order to let existing callers
work as before.

In future it would be good to have a dacl_insert_aces() that
would canonicalize the ace order before storing, but that a task
for another day.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15424

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
(cherry picked from commit a1109a9bf12e020636b8d66fc54984aac58bfe6b)
python/samba/sd_utils.py