George Bișoc bee9b2fcc6 [LSASRV] Set up a security descriptor for the token object ... LSASS implements a default ACL inside the token structure field but it doesn't actually set a protective security descriptor for the token object itself. This happens so that the kernel gets whatever default ACLs it finds for the object which is incorrect. SYSTEM has full and supreme control over tokens, administrators can only read the token as such. The logged in user of their own token has full access. Credits and courtesy goes to Thomas Faber for the patch.		2022-05-06 10:09:36 +02:00
..
lang
authpackage.c
authport.c
CMakeLists.txt
database.c
dssetup.c
lookup.c
lsarpc.c	[LSASRV] Return STATUS_DIRECTORY_SERVICE_REQUIRED for all trusted domain functions that use a policy handle and a domain name or domain SID when the machine is not a domain controller.	2018-11-04 15:27:57 +01:00
lsasrv.c
lsasrv.h
lsasrv.rc
lsasrv.spec
notify.c
policy.c
privileges.c
registry.c
resources.h
security.c
service.c
session.c
srm.c
utils.c