r4150: - add fns for manipulating the privilege_mask in a security_token

- add the hooks in access_check that check the privilege bitmasks for
  SEC_STD_DELETE and SEC_FLAG_SYSTEM_SECURITY
(This used to be commit 0fa3764edcabffe8f7d5e40f0097f97d0c4519c4)

1 files changed, 24 insertions, 0 deletions

diff --git a/source4/libcli/security/privilege.c b/source4/libcli/security/privilege.c
index 1962aaa374..10a51c8b42 100644
--- a/source4/libcli/security/privilege.c
+++ b/source4/libcli/security/privilege.c
@@ -82,3 +82,27 @@ int sec_privilege_id(const char *name)
 	}
 	return -1;
 }
+
+
+/*
+  return True if a security_token has a particular privilege bit set
+*/
+BOOL sec_privilege_check(const struct security_token *token, unsigned int privilege)
+{
+	uint64_t mask = 1;
+	mask <<= (privilege-1);
+	if (token->privilege_mask & mask) {
+		return True;
+	}
+	return False;
+}
+
+/*
+  set a bit in the privilege mask
+*/
+void sec_privilege_set(struct security_token *token, unsigned int privilege)
+{
+	uint64_t mask = 1;
+	mask <<= (privilege-1);
+	token->privilege_mask |= mask;
+}