27 lines
1.1 KiB
Diff
27 lines
1.1 KiB
Diff
Origin: https://build.opensuse.org/projects/SUSE:SLE-15-SP2:Update/packages/389-ds/files/0001-Fix-ACI-bypass-in-shortcut-filter-condition.patch?expand=1
|
|
|
|
From 21629670b92260c64c0355d656cd106ff8b84732 Mon Sep 17 00:00:00 2001
|
|
From: William Brown <william@blackhats.net.au>
|
|
Date: Tue, 31 May 2022 10:26:00 +1000
|
|
Subject: [PATCH] Fix ACI bypass in shortcut filter condition
|
|
|
|
---
|
|
ldap/servers/slapd/back-ldbm/back-ldbm.h | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/ldap/servers/slapd/back-ldbm/back-ldbm.h b/ldap/servers/slapd/back-ldbm/back-ldbm.h
|
|
index 9d78ad778..7fb85f0f6 100644
|
|
--- a/ldap/servers/slapd/back-ldbm/back-ldbm.h
|
|
+++ b/ldap/servers/slapd/back-ldbm/back-ldbm.h
|
|
@@ -194,7 +194,7 @@ extern int ldbm_warn_if_no_db;
|
|
* The candidate list size at which it is cheaper to apply the filter test
|
|
* to the whole list than to continue ANDing in IDLs.
|
|
*/
|
|
-#define FILTER_TEST_THRESHOLD (NIDS)10
|
|
+#define FILTER_TEST_THRESHOLD (NIDS)0
|
|
|
|
/* flags to indicate what kind of startup the dblayer should do */
|
|
#define DBLAYER_IMPORT_MODE 0x1
|
|
--
|
|
2.36.1
|