From 3d4af73f50660d448e7c60ca791165d6a4fe36d4 Mon Sep 17 00:00:00 2001 From: Günther Deschner Date: Wed, 26 Sep 2007 21:46:43 +0000 Subject: r25362: Add "NT Authority\System" with Full Access to the default registry security descriptor. Guenther (This used to be commit ddc6d051115577b27529c46ff98267517218fe59) --- source3/registry/reg_frontend_hilvl.c | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) (limited to 'source3') diff --git a/source3/registry/reg_frontend_hilvl.c b/source3/registry/reg_frontend_hilvl.c index 4ae1801a61..bc2f66f25a 100644 --- a/source3/registry/reg_frontend_hilvl.c +++ b/source3/registry/reg_frontend_hilvl.c @@ -34,7 +34,7 @@ static struct generic_mapping reg_generic_map = static SEC_DESC* construct_registry_sd( TALLOC_CTX *ctx ) { - SEC_ACE ace[2]; + SEC_ACE ace[3]; SEC_ACCESS mask; size_t i = 0; SEC_DESC *sd; @@ -50,7 +50,12 @@ static SEC_DESC* construct_registry_sd( TALLOC_CTX *ctx ) init_sec_access(&mask, REG_KEY_ALL ); init_sec_ace(&ace[i++], &global_sid_Builtin_Administrators, SEC_ACE_TYPE_ACCESS_ALLOWED, mask, 0); - + + /* Full Access 'NT Authority\System' */ + + init_sec_access(&mask, REG_KEY_ALL ); + init_sec_ace(&ace[i++], &global_sid_System, SEC_ACE_TYPE_ACCESS_ALLOWED, mask, 0); + /* create the security descriptor */ -- cgit