diff options
Diffstat (limited to 'source3/smbd/conn_msg.c')
| -rw-r--r-- | source3/smbd/conn_msg.c | 148 |
1 files changed, 148 insertions, 0 deletions
diff --git a/source3/smbd/conn_msg.c b/source3/smbd/conn_msg.c new file mode 100644 index 0000000..9435d38 --- /dev/null +++ b/source3/smbd/conn_msg.c @@ -0,0 +1,148 @@ +/* + Unix SMB/CIFS implementation. + Manage connections_struct structures + Copyright (C) Andrew Tridgell 1998 + Copyright (C) Alexander Bokovoy 2002 + Copyright (C) Jeremy Allison 2010 + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see <http://www.gnu.org/licenses/>. +*/ + +#include "includes.h" +#include "smbd/smbd.h" +#include "smbd/globals.h" + +/**************************************************************************** + Receive a smbcontrol message to forcibly unmount a share. + The message contains just a share name and all instances of that + share are unmounted. + The special sharename '*' forces unmount of all shares. +****************************************************************************/ + +struct force_tdis_state { + const char *sharename; +}; + +static bool force_tdis_check( + struct connection_struct *conn, + void *private_data) +{ + struct force_tdis_state *state = private_data; + const struct loadparm_substitution *lp_sub = + loadparm_s3_global_substitution(); + char *servicename = NULL; + bool do_close; + + if (strcmp(state->sharename, "*") == 0) { + DBG_WARNING("Forcing close of all shares\n"); + return true; + } + + servicename = lp_servicename(talloc_tos(), lp_sub, SNUM(conn)); + do_close = strequal(servicename, state->sharename); + + TALLOC_FREE(servicename); + + return do_close; +} + +void msg_force_tdis(struct messaging_context *msg, + void *private_data, + uint32_t msg_type, + struct server_id server_id, + DATA_BLOB *data) +{ + struct force_tdis_state state = { + .sharename = (const char *)data->data, + }; + struct smbd_server_connection *sconn = + talloc_get_type_abort(private_data, + struct smbd_server_connection); + + if ((data->length == 0) || (data->data[data->length-1] != 0)) { + DBG_WARNING("Ignoring invalid sharename\n"); + return; + } + + conn_force_tdis(sconn, force_tdis_check, &state); +} + +static bool force_tdis_denied_check( + struct connection_struct *conn, + void *private_data) +{ + bool do_close; + uint32_t share_access; + bool read_only; + NTSTATUS status; + + do_close = force_tdis_check(conn, private_data); + if (!do_close) { + return false; + } + + status = check_user_share_access( + conn, + conn->session_info, + &share_access, + &read_only); + if (!NT_STATUS_IS_OK(status)) { + DBG_DEBUG("check_user_share_access returned %s\n", + nt_errstr(status)); + return true; /* close the share */ + } + + if (conn->share_access != share_access) { + DBG_DEBUG("share_access changed from %"PRIx32" to %"PRIx32"\n", + conn->share_access, share_access); + return true; /* close the share */ + } + + if (conn->read_only != read_only) { + DBG_DEBUG("read_only changed from %s to %s\n", + conn->read_only ? "true" : "false", + read_only ? "true" : "false"); + return true; /* close the share */ + } + + /* + * all still ok, keep the connection open + */ + return false; +} + +void msg_force_tdis_denied( + struct messaging_context *msg, + void *private_data, + uint32_t msg_type, + struct server_id server_id, + DATA_BLOB *data) +{ + struct force_tdis_state state = { + .sharename = (const char *)data->data, + }; + struct smbd_server_connection *sconn = + talloc_get_type_abort(private_data, + struct smbd_server_connection); + + if ((data->length == 0) || (data->data[data->length-1] != 0)) { + DBG_WARNING("Ignoring invalid sharename\n"); + return; + } + + change_to_root_user(); + reload_services(sconn, conn_snum_used, false); + + conn_force_tdis(sconn, force_tdis_denied_check, &state); +} |