svn commit: samba r25362 - in branches: SAMBA_3_2/source/registry SAMBA_3_2_0/source/registry

gd at samba.org gd at samba.org
Wed Sep 26 21:46:47 GMT 2007


Author: gd
Date: 2007-09-26 21:46:43 +0000 (Wed, 26 Sep 2007)
New Revision: 25362

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=25362

Log:
Add "NT Authority\System" with Full Access to the default registry security
descriptor.

Guenther

Modified:
   branches/SAMBA_3_2/source/registry/reg_frontend_hilvl.c
   branches/SAMBA_3_2_0/source/registry/reg_frontend_hilvl.c


Changeset:
Modified: branches/SAMBA_3_2/source/registry/reg_frontend_hilvl.c
===================================================================
--- branches/SAMBA_3_2/source/registry/reg_frontend_hilvl.c	2007-09-26 19:28:40 UTC (rev 25361)
+++ branches/SAMBA_3_2/source/registry/reg_frontend_hilvl.c	2007-09-26 21:46:43 UTC (rev 25362)
@@ -34,7 +34,7 @@
 
 static SEC_DESC* construct_registry_sd( TALLOC_CTX *ctx )
 {
-	SEC_ACE ace[2];	
+	SEC_ACE ace[3];
 	SEC_ACCESS mask;
 	size_t i = 0;
 	SEC_DESC *sd;
@@ -50,8 +50,13 @@
 	
 	init_sec_access(&mask, REG_KEY_ALL );
 	init_sec_ace(&ace[i++], &global_sid_Builtin_Administrators, SEC_ACE_TYPE_ACCESS_ALLOWED, mask, 0);
+
+	/* Full Access 'NT Authority\System' */
+
+	init_sec_access(&mask, REG_KEY_ALL );
+	init_sec_ace(&ace[i++], &global_sid_System, SEC_ACE_TYPE_ACCESS_ALLOWED, mask, 0);
+
 	
-	
 	/* create the security descriptor */
 	
 	if ( !(acl = make_sec_acl(ctx, NT4_ACL_REVISION, i, ace)) )

Modified: branches/SAMBA_3_2_0/source/registry/reg_frontend_hilvl.c
===================================================================
--- branches/SAMBA_3_2_0/source/registry/reg_frontend_hilvl.c	2007-09-26 19:28:40 UTC (rev 25361)
+++ branches/SAMBA_3_2_0/source/registry/reg_frontend_hilvl.c	2007-09-26 21:46:43 UTC (rev 25362)
@@ -34,7 +34,7 @@
 
 static SEC_DESC* construct_registry_sd( TALLOC_CTX *ctx )
 {
-	SEC_ACE ace[2];	
+	SEC_ACE ace[3];
 	SEC_ACCESS mask;
 	size_t i = 0;
 	SEC_DESC *sd;
@@ -50,8 +50,13 @@
 	
 	init_sec_access(&mask, REG_KEY_ALL );
 	init_sec_ace(&ace[i++], &global_sid_Builtin_Administrators, SEC_ACE_TYPE_ACCESS_ALLOWED, mask, 0);
+
+	/* Full Access 'NT Authority\System' */
+
+	init_sec_access(&mask, REG_KEY_ALL );
+	init_sec_ace(&ace[i++], &global_sid_System, SEC_ACE_TYPE_ACCESS_ALLOWED, mask, 0);
+
 	
-	
 	/* create the security descriptor */
 	
 	if ( !(acl = make_sec_acl(ctx, NT4_ACL_REVISION, i, ace)) )



More information about the samba-cvs mailing list