Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2025-04-04 20:50:41 +00:00
Code Issues Projects Releases Packages Wiki Activity

[SDK][NDK][XDK] Add the privilege flags needed for token filtering

Browse source 
These are needed for CreateRestrictedToken, NtFilterToken and SeFilterToken respectively. See the link down below for more information.
https://docs.microsoft.com/en-us/windows/win32/api/securitybaseapi/nf-securitybaseapi-createrestrictedtoken
This commit is contained in:
George Bișoc 2021-10-19 11:22:12 +02:00
parent d0b6b10868
commit a15e2472b8
No known key found for this signature in database
GPG key ID: 688C4FBE25D7DEF6
2 changed files with 23 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
sdk/include/ndk/setypes.h
View file

@ -108,6 +108,16 @@ typedef struct _TOKEN_ACCESS_INFORMATION
SE_GROUP_INTEGRITY | \
SE_GROUP_INTEGRITY_ENABLED)
//
// Privilege token filtering flags
//
#define DISABLE_MAX_PRIVILEGE 0x1
#define SANDBOX_INERT 0x2
#if (NTDDI_VERSION >= NTDDI_LONGHORN)
#define LUA_TOKEN 0x4
#define WRITE_RESTRICTED 0x8
#endif
//
// Proxy Class enumeration
//

13
sdk/include/xdk/setypes.h
View file

@ -147,6 +147,19 @@ typedef struct _SE_IMPERSONATION_STATE {
#define SEF_MACL_VALID_FLAGS (SEF_MACL_NO_WRITE_UP | SEF_MACL_NO_READ_UP | SEF_MACL_NO_EXECUTE_UP)
$endif (_WDMDDK_ || _WINNT_)
$if (_WINNT_)
/* Privilege token filtering flags */
#define DISABLE_MAX_PRIVILEGE 0x1
#define SANDBOX_INERT 0x2
#if (NTDDI_VERSION >= NTDDI_LONGHORN)
#define LUA_TOKEN 0x4
#define WRITE_RESTRICTED 0x8
#endif
$endif (_WINNT_)
$if (_WDMDDK_)
typedef enum _SECURITY_OPERATION_CODE {