George Bișoc 0129de218b [NTOS:SE] Mark the token as no longer belonging to admin group upon effective duplication ... A scenario where it happens that an access token belongs to an administrators group but it's disabled (that is, SeAliasAdminsSid has no attributes or it doesn't have SE_GROUP_ENABLED turn ON), the function removes this group from the token but still has TOKEN_HAS_ADMIN_GROUP flag which can lead to erratic behavior across the kernel and security modules -- implying that the token still belongs to administrators group. This is an oversight from my part.		2021-11-04 09:30:00 +01:00
..
access.c	[FORMATTING] Remove trailing whitespace. Addendum to 34593d93.	2021-09-13 03:52:22 +02:00
accesschk.c	[FORMATTING] Remove trailing whitespace. Addendum to 34593d93.	2021-09-13 03:52:22 +02:00
acl.c	[FORMATTING] Remove trailing whitespace. Addendum to 34593d93.	2021-09-13 03:52:22 +02:00
audit.c	[FORMATTING] Remove trailing whitespace. Addendum to 34593d93.	2021-09-13 03:52:22 +02:00
priv.c	[NTOS:SE] Check the privilege count against the maximum threshold	2021-09-27 09:37:28 +02:00
sd.c	[NTOS:SE] Do not set SE_DACL_PRESENT flag that early	2021-09-24 19:39:30 +02:00
semgr.c	[FORMATTING] Remove trailing whitespace. Addendum to 34593d93.	2021-09-13 03:52:22 +02:00
sid.c	[NTOS:SE] Define a name macro for the threshold value	2021-09-27 09:39:23 +02:00
sqos.c	[FORMATTING] Remove trailing whitespace. Addendum to 34593d93.	2021-09-13 03:52:22 +02:00
srm.c	[FORMATTING] Remove trailing whitespace. Addendum to 34593d93.	2021-09-13 03:52:22 +02:00
token.c	[NTOS:SE] Mark the token as no longer belonging to admin group upon effective duplication	2021-11-04 09:30:00 +01:00