ApfelTeeSaft/reactos
1
0
Fork 0
mirror of https://github.com/ApfelTeeSaft/reactos.git synced 2026-09-02 04:13:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

[LSASRV]

Browse Source 
LsarSetInfromationPolicy: Check desired access depending on the information class.
LsarLookupPrivilegeValue / LsarLookupPrivilegeName: Check desired access.

svn path=/trunk/; revision=57351
This commit is contained in:
Eric Kohl
2012-09-20 11:29:45 +00:00
parent 1e007b7c03
commit bd28842f69
1 changed files with 34 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
reactos/dll/win32/lsasrv/lsarpc.c
+34 -3
View File
@@ -278,6 +278,7 @@ NTSTATUS WINAPI LsarSetInformationPolicy(
PLSAPR_POLICY_INFORMATION PolicyInformation)
{
PLSA_DB_OBJECT DbObject;
ACCESS_MASK DesiredAccess = 0;
NTSTATUS Status;
TRACE("LsarSetInformationPolicy(%p,0x%08x,%p)\n",
@@ -288,9 +289,39 @@ NTSTATUS WINAPI LsarSetInformationPolicy(
TRACE("*PolicyInformation %p\n", *PolicyInformation);
}
switch (InformationClass)
{
case PolicyAuditLogInformation:
case PolicyAuditFullSetInformation:
DesiredAccess = POLICY_AUDIT_LOG_ADMIN;
break;
case PolicyAuditEventsInformation:
DesiredAccess = POLICY_SET_AUDIT_REQUIREMENTS;
break;
case PolicyPrimaryDomainInformation:
case PolicyAccountDomainInformation:
DesiredAccess = POLICY_TRUST_ADMIN;
break;
case PolicyLsaServerRoleInformation:
case PolicyReplicaSourceInformation:
DesiredAccess = POLICY_SERVER_ADMIN;
break;
case PolicyDefaultQuotaInformation:
DesiredAccess = POLICY_SET_DEFAULT_QUOTA_LIMITS;
break;
default:
ERR("Invalid InformationClass!\n");
return STATUS_INVALID_PARAMETER;
}
Status = LsapValidateDbObject(PolicyHandle,
LsaDbPolicyObject,
0, /* FIXME */
DesiredAccess,
&DbObject);
if (!NT_SUCCESS(Status))
return Status;
@@ -1338,7 +1369,7 @@ NTSTATUS WINAPI LsarLookupPrivilegeValue(
Status = LsapValidateDbObject(PolicyHandle,
LsaDbPolicyObject,
0, /* FIXME */
POLICY_LOOKUP_NAMES,
NULL);
if (!NT_SUCCESS(Status))
{
@@ -1368,7 +1399,7 @@ NTSTATUS WINAPI LsarLookupPrivilegeName(
Status = LsapValidateDbObject(PolicyHandle,
LsaDbPolicyObject,
0, /* FIXME */
POLICY_LOOKUP_NAMES,
NULL);
if (!NT_SUCCESS(Status))
{