reactos/ntoskrnl/se
George Bișoc 4b4638dc55
[NTOS:SE] HACK: Temporarily grant access to the client if empty generic mapping was passed
Certain apps such as AIM installer passes an empty generic mapping (this can
be understood with their generic masks set to 0) and our code tries to map
the access right from an ACE with the mapping provided by AccessCheck.

This can lead to a bug where we would not be able to decode the generic right
from an ACE as we need a proper generic mapping in order to do so. A mask
right that is not decoded it cannot be used to mask out the remaining rights,
further resulting into a denied access right.

What Windows does instead is they are mapping the ACE's rights in another place,
presumably when setting security data to an object, and they are using the
generic mapping passed by the kernel.

What we can do for the time being is to temporarily grant access to the client,
but only if they are an administrator.

CORE-18576
2023-10-04 18:04:29 +02:00
..
access.c [NTOS:SE][FORMATTING] Fix the file header 2023-03-07 18:39:46 +01:00
accesschk.c [NTOS:SE] HACK: Temporarily grant access to the client if empty generic mapping was passed 2023-10-04 18:04:29 +02:00
acl.c [NTOS:SE][FORMATTING] Fix the file header 2023-03-07 18:39:46 +01:00
audit.c [NTOS:SE] Declare function prototypes & add OBJECT_TYPE_LIST_INTERNAL 2023-08-22 17:54:17 +02:00
client.c [NTOS:SE][FORMATTING] Fix the file header 2023-03-07 18:39:46 +01:00
debug.c [NTOS:SE] Let SepGetSidFromAce figure out the ACE type 2023-08-23 17:54:47 +02:00
objtype.c [NTOS:SE] Implement object type list utilities 2023-08-22 17:54:17 +02:00
priv.c [NTOS:SE][FORMATTING] Fix the file header 2023-03-07 18:39:46 +01:00
sd.c [NTOS:SE][FORMATTING] Fix the file header 2023-03-07 18:39:46 +01:00
semgr.c [NTOS:SE][FORMATTING] Fix the file header 2023-03-07 18:39:46 +01:00
sid.c [NTOS:SE] Let SepGetSidFromAce figure out the ACE type 2023-08-23 17:54:47 +02:00
sqos.c [NTOS:SE][FORMATTING] Fix the file header 2023-03-07 18:39:46 +01:00
srm.c [NTOS:SE][FORMATTING] Fix the file header 2023-03-07 18:39:46 +01:00
subject.c [NTOS:SE][FORMATTING] Fix the file header 2023-03-07 18:39:46 +01:00
token.c [NTOS:SE] Refactor SeTokenCanImpersonate 2023-06-09 11:53:56 +02:00
tokenadj.c [NTOS:SE][FORMATTING] Fix the file header 2023-03-07 18:39:46 +01:00
tokencls.c [NTOS:SE][FORMATTING] Fix the file header 2023-03-07 18:39:46 +01:00
tokenlif.c [NTOS:SE] Make an access token effective after the end of token duplication 2023-06-04 11:09:22 +02:00