samba: fix some security problems

[openwrt/svn-archive/archive.git] / package / network / services / samba36 / patches / 120-add_missing_ifdef.patch

diff --git a/package/network/services/samba36/patches/120-add_missing_ifdef.patch b/package/network/services/samba36/patches/120-add_missing_ifdef.patch
index dbd9adc1d7b929ca702f3c9d3417f80c66951ad9..3c0ef8ab3f38f2309d3ba5327b49df241d69e151 100644 (file)
--- a/package/network/services/samba36/patches/120-add_missing_ifdef.patch
+++ b/package/network/services/samba36/patches/120-add_missing_ifdef.patch
@@ -24,3 +24,18 @@
        epmapper_commands,
        shutdown_commands,
        test_commands,
+--- a/source3/rpc_server/srv_pipe.c
++++ b/source3/rpc_server/srv_pipe.c
+@@ -433,10 +433,12 @@ static bool check_bind_req(struct pipes_
+       if (ok) {
+               context_fns->allow_connect = true;
+       }
++#ifdef DEVELOPER
+       ok = ndr_syntax_id_equal(abstract, &ndr_table_rpcecho.syntax_id);
+       if (ok) {
+               context_fns->allow_connect = true;
+       }
++#endif
+       /*
+        * every interface can be modified to allow "connect" auth_level by
+        * using a parametric option like: