diff options
| author | Corinna Vinschen <corinna@vinschen.de> | 2006-11-08 11:38:05 +0000 |
|---|---|---|
| committer | Corinna Vinschen <corinna@vinschen.de> | 2006-11-08 11:38:05 +0000 |
| commit | 2fd2ddf3f5bacc7cccc9ac2d32b8024125808b6e (patch) | |
| tree | 1ea1f194b7aa34ea6837b16c23bc2214203518cc /winsup/cygwin/security.h | |
| parent | 86bc8fadff6523470b68b9838fe7af2e55f3b5a3 (diff) | |
| download | cygnal-2fd2ddf3f5bacc7cccc9ac2d32b8024125808b6e.tar.gz cygnal-2fd2ddf3f5bacc7cccc9ac2d32b8024125808b6e.tar.bz2 cygnal-2fd2ddf3f5bacc7cccc9ac2d32b8024125808b6e.zip | |
* sec_helper.cc (sid_auth): Remove.
(well_known_this_org_sid): New well known sid.
(SECURITY_MANDATORY_INTEGRITY_AUTHORITY): Define.
(mandatory_medium_integrity_sid): New well known sid.
(mandatory_high_integrity_sid): Ditto.
(mandatory_system_integrity_sid): Ditto.
(cygsid::get_sid): Use local SID_IDENTIFIER_AUTHORITY. Allow all
authorities fitting in a UCHAR.
* security.cc (get_token_group_sidlist): Always add the local
group to the token. Add comment. Add "This Organization" group
if available in incoming group list.
(get_server_groups): Only add world and authenticated users groups
if not already in list.
(create_token): Add matching mandatory integrity SID to group list
on systems supporting Mandatory Integrity Control.
* security.h (well_known_this_org_sid): Define.
(mandatory_medium_integrity_sid): Define.
(mandatory_high_integrity_sid): Define.
(mandatory_system_integrity_sid): Define.
* wincap.h: Define has_mandatory_integrity_control throughout.
* wincap.cc: Ditto.
Diffstat (limited to 'winsup/cygwin/security.h')
| -rw-r--r-- | winsup/cygwin/security.h | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/winsup/cygwin/security.h b/winsup/cygwin/security.h index f4e4f2be2..fd52b93cc 100644 --- a/winsup/cygwin/security.h +++ b/winsup/cygwin/security.h @@ -245,8 +245,12 @@ extern cygpsid well_known_batch_sid; extern cygpsid well_known_interactive_sid; extern cygpsid well_known_service_sid; extern cygpsid well_known_authenticated_users_sid; +extern cygpsid well_known_this_org_sid; extern cygpsid well_known_system_sid; extern cygpsid well_known_admins_sid; +extern cygpsid mandatory_medium_integrity_sid; +extern cygpsid mandatory_high_integrity_sid; +extern cygpsid mandatory_system_integrity_sid; /* Order must be same as cygpriv in sec_helper.cc. */ enum cygpriv_idx { |