From 2387e3bcfeb4c2e54342a8fff4b157e9ba68024b Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Mon, 30 Aug 2010 12:47:29 +1000 Subject: s3-privs Call security_token_set_privilege() rather than manual assignment This avoids as much direct modifiction of the bitmask as possible. Andrew Bartlett Signed-off-by: Andrew Tridgell --- source3/registry/reg_util_token.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'source3/registry') diff --git a/source3/registry/reg_util_token.c b/source3/registry/reg_util_token.c index 898b64b2a7..6373d48305 100644 --- a/source3/registry/reg_util_token.c +++ b/source3/registry/reg_util_token.c @@ -43,7 +43,8 @@ NTSTATUS registry_create_admin_token(TALLOC_CTX *mem_ctx, status = NT_STATUS_NO_MEMORY; goto done; } - token->privilege_mask = se_disk_operators; + security_token_set_privilege(token, SEC_PRIV_DISK_OPERATOR); + status = add_sid_to_array(token, &global_sid_Builtin_Administrators, &token->sids, &token->num_sids); if (!NT_STATUS_IS_OK(status)) { -- cgit