← Back to branch summary

~ubuntu-branches/ubuntu/lucid/samba/lucid-security

« back to all changes in this revision

Viewing changes to source3/smbd/server.c

  • Committer: Bazaar Package Importer
  • Author(s): Marc Deslauriers
  • Date: 2010-03-08 17:50:57 UTC
  • Revision ID: james.westby@ubuntu.com-20100308175057-z5ao2e65nqgiovbn
Tags: 2:3.4.6~dfsg-1ubuntu2
* SECURITY UPDATE: permission bypass via incorrect CAP_DAC_OVERRIDE
  handling.
  - debian/patches/security-CVE-2010-0728.patch: fix capability handling
    in source3/{include/smb.h,lib/system.c,smbd/server.c}.
  - CVE-2010-0728
* Removed patches:
  - debian/patches/debian-changes-2:3.4.5~dfsg-2ubuntu2: merge error
  - debian/patches/debian-changes-2:3.4.6~dfsg-1ubuntu1: merge error

Show diffs side-by-side

added added

removed removed

Lines of Context:
source3/smbd/server.c
1031
1031
        gain_root_privilege();
1032
1032
        gain_root_group_privilege();
1033
1033
 
1034
 
        /*
1035
 
         * Ensure we have CAP_KILL capability set on Linux,
1036
 
         * where we need this to communicate with threads.
1037
 
         * This is inherited by new threads, but not by new
1038
 
         * processes across exec().
1039
 
         */
1040
 
        set_effective_capability(KILL_CAPABILITY);
1041
 
 
1042
1034
        fault_setup((void (*)(void *))exit_server_fault);
1043
1035
        dump_core_setup("smbd");
1044
1036