1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
|
/*
Unix SMB/CIFS implementation.
Manage connections_struct structures
Copyright (C) Andrew Tridgell 1998
Copyright (C) Alexander Bokovoy 2002
Copyright (C) Jeremy Allison 2010
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#include "includes.h"
#include "smbd/smbd.h"
#include "smbd/globals.h"
/****************************************************************************
Receive a smbcontrol message to forcibly unmount a share.
The message contains just a share name and all instances of that
share are unmounted.
The special sharename '*' forces unmount of all shares.
****************************************************************************/
struct force_tdis_state {
const char *sharename;
};
static bool force_tdis_check(
struct connection_struct *conn,
void *private_data)
{
struct force_tdis_state *state = private_data;
const struct loadparm_substitution *lp_sub =
loadparm_s3_global_substitution();
char *servicename = NULL;
bool do_close;
if (strcmp(state->sharename, "*") == 0) {
DBG_WARNING("Forcing close of all shares\n");
return true;
}
servicename = lp_servicename(talloc_tos(), lp_sub, SNUM(conn));
do_close = strequal(servicename, state->sharename);
TALLOC_FREE(servicename);
return do_close;
}
void msg_force_tdis(struct messaging_context *msg,
void *private_data,
uint32_t msg_type,
struct server_id server_id,
DATA_BLOB *data)
{
struct force_tdis_state state = {
.sharename = (const char *)data->data,
};
struct smbd_server_connection *sconn =
talloc_get_type_abort(private_data,
struct smbd_server_connection);
if ((data->length == 0) || (data->data[data->length-1] != 0)) {
DBG_WARNING("Ignoring invalid sharename\n");
return;
}
conn_force_tdis(sconn, force_tdis_check, &state);
}
static bool force_tdis_denied_check(
struct connection_struct *conn,
void *private_data)
{
bool do_close;
uint32_t share_access;
bool read_only;
NTSTATUS status;
do_close = force_tdis_check(conn, private_data);
if (!do_close) {
return false;
}
status = check_user_share_access(
conn,
conn->session_info,
&share_access,
&read_only);
if (!NT_STATUS_IS_OK(status)) {
DBG_DEBUG("check_user_share_access returned %s\n",
nt_errstr(status));
return true; /* close the share */
}
if (conn->share_access != share_access) {
DBG_DEBUG("share_access changed from %"PRIx32" to %"PRIx32"\n",
conn->share_access, share_access);
return true; /* close the share */
}
if (conn->read_only != read_only) {
DBG_DEBUG("read_only changed from %s to %s\n",
conn->read_only ? "true" : "false",
read_only ? "true" : "false");
return true; /* close the share */
}
/*
* all still ok, keep the connection open
*/
return false;
}
void msg_force_tdis_denied(
struct messaging_context *msg,
void *private_data,
uint32_t msg_type,
struct server_id server_id,
DATA_BLOB *data)
{
struct force_tdis_state state = {
.sharename = (const char *)data->data,
};
struct smbd_server_connection *sconn =
talloc_get_type_abort(private_data,
struct smbd_server_connection);
if ((data->length == 0) || (data->data[data->length-1] != 0)) {
DBG_WARNING("Ignoring invalid sharename\n");
return;
}
change_to_root_user();
reload_services(sconn, conn_snum_used, false);
conn_force_tdis(sconn, force_tdis_denied_check, &state);
}
|
