File: //usr/lib/python3/dist-packages/samba/__pycache__/sd_utils.cpython-310.pyc
o
�\ e> � @ sp d Z ddlZddlmZmZmZ ddlmZmZ ddlm Z m
Z
m Z ddl m
Z
ddlmZ G dd � d e�ZdS )
z5Utility methods for security descriptor manipulation.� N)�Message�MessageElement�Dn)�FLAG_MOD_REPLACE�
SCOPE_BASE)�ndr_pack�
ndr_unpack� ndr_deepcopy)�security)� NT_STATUS_OBJECT_NAME_NOT_FOUNDc @ st e Zd ZdZdd� Zddd�Zddd�Zd d
� Z dd d �Zdd
d�Z dd� Z
ddd�Z ddd�Z g fdd�Z
dS )�SDUtilszCSome utilities for manipulation of security descriptors on objects.c C s || _ t�| j �� �| _d S �N)�ldbr
�dom_sid�get_domain_sid�
domain_sid)�self�samdb� r �0/usr/lib/python3/dist-packages/samba/sd_utils.py�__init__" s zSDUtils.__init__Nc C s� t � }t|t�r ||_nt| j|�|_t|t�s t|tj�s J �t|t�r.tj�|| j �}nt|tj�r6|}t
t |�t d�|d< | j�
||� dS )zfModify security descriptor using either SDDL string
or security.descriptor object
�nTSecurityDescriptorN)r �
isinstancer �dnr �strr
�
descriptor� from_sddlr r r r �modify)r � object_dn�sd�controls�m�tmp_descr r r �modify_sd_on_dn& s
�zSDUtils.modify_sd_on_dnc C s4 | j j|td dg|d�}|d d d }ttj|�S )Nr �r r )r �searchr r r
r )r r r �res�descr r r �
read_sd_on_dn; s
� zSDUtils.read_sd_on_dnc C s$ | j �|�}ttj|d d d �S )Nr � objectSid)r r% r r
r )r r r& r r r �get_object_sidA s zSDUtils.get_object_sidc s� |d u rg }|d u r g }� fdd�}|d u rc|d u r dt j g}� j||d�}|jt j@ sbt|j�}|jD ],} | jt j @ raz|�
| � W q5 t j y` }
z|
j
d tkrV|
�W Y d }
~
q5d }
~
ww q5n$|d u rig }� jj|td |g|d�} t| d | d �} t j�| � j�}d}
g }g }g }|D ]4} t| t�r�|| �} t| t j�s�J �| jt j @ r�|�| � q�| |jjvr�|�| � q�|�
| � |
d7 }
q�|D ]I} d}t| t�r�d| v r�| d }| d } t| t�r�|| �} t| t j�s�J �| jt j @ r�|�| � q�| |jjv �r|�| � q�|�| |� |
d7 }
q�|
dk�r |||fS |d u �r*� j|||d� n |� � j�}t � }||_ t |� d
�t!|�||< � jj"||d� |||fS ) Nc s4 t j�d| � j�}t|jj�dksJ �|jjd S )N�D:� r )r
r r r �len�dacl�aces)�ace_sddl�ace_sd�r r r �
ace_from_sddlL s z2SDUtils.update_aces_in_dacl.<locals>.ace_from_sddlz
sd_flags:1:%dr$ r r, ����idx�ace�ascii)#r
� SECINFO_DACLr( �type�SEC_DESC_DACL_PROTECTEDr r. r/ �flags�SEC_ACE_FLAG_INHERITED_ACE� dacl_del_ace�samba�
NTSTATUSError�argsr r r% r r r r r r r6 �append�dict�dacl_addr# �as_sddlr r r �encoder r )r r �del_aces�add_aces� sddl_attrr r3 r � dacl_copyr6 �errr& �old_sddl� num_changes� del_ignored� add_ignored�inherited_ignored�add_idx�new_sddlr! r r2 r �update_aces_in_daclE s�
����
�
�
zSDUtils.update_aces_in_daclc C s` t j�d| | j�}g }d}|jjD ]}|�||d�� |d7 }q| j|||d�\}} }
| |
fS )zCPrepend an ACE (or more) to an objects security descriptor
r+ r )r5 r6 r, �rG r �r
r r r r. r/ rA rR ) r r r/ r r1 rG rP r6 �_�ai�iir r r �dacl_prepend_aces� s
�zSDUtils.dacl_prepend_acesc C s | j ||dgd�\}}dS )z?Add an ACE (or more) to an objects security descriptor
�show_deleted:1r$ N)rX )r r r6 rU r r r � dacl_add_ace� s �zSDUtils.dacl_add_acec
C sN t j�d| | j�}g }|jjD ]}|�|� q| j|||d�\}}} || fS )zBAppend an ACE (or more) to an objects security descriptor
r+ rS rT )
r r r/ r r1 rG r6 rU rV rW r r r �dacl_append_aces� � �zSDUtils.dacl_append_acesc
C sN t j�d| | j�}g }|jjD ]}|�|� q| j|||d�\}}} || fS )zBDelete an ACE (or more) to an objects security descriptor
r+ )rF r rT )
r r r/ r �del_sdrF r6 �dirU rW r r r �dacl_delete_aces� r\ zSDUtils.dacl_delete_acesc C s | � ||dg �}|�| j�S )z:Return object nTSecutiryDescriptor in SDDL format
rY )r( rD r )r r r r' r r r �get_sd_as_sddl� s zSDUtils.get_sd_as_sddlr
)NNNN)�__name__�
__module__� __qualname__�__doc__r r# r( r* rR rX rZ r[ r_ r` r r r r r s
�
c
r )rd r> r r r r r r � samba.ndrr r r � samba.dcerpcr
�samba.ntstatusr �objectr r r r r �<module> s