From 2fd2ddf3f5bacc7cccc9ac2d32b8024125808b6e Mon Sep 17 00:00:00 2001 From: Corinna Vinschen Date: Wed, 8 Nov 2006 11:38:05 +0000 Subject: * sec_helper.cc (sid_auth): Remove. (well_known_this_org_sid): New well known sid. (SECURITY_MANDATORY_INTEGRITY_AUTHORITY): Define. (mandatory_medium_integrity_sid): New well known sid. (mandatory_high_integrity_sid): Ditto. (mandatory_system_integrity_sid): Ditto. (cygsid::get_sid): Use local SID_IDENTIFIER_AUTHORITY. Allow all authorities fitting in a UCHAR. * security.cc (get_token_group_sidlist): Always add the local group to the token. Add comment. Add "This Organization" group if available in incoming group list. (get_server_groups): Only add world and authenticated users groups if not already in list. (create_token): Add matching mandatory integrity SID to group list on systems supporting Mandatory Integrity Control. * security.h (well_known_this_org_sid): Define. (mandatory_medium_integrity_sid): Define. (mandatory_high_integrity_sid): Define. (mandatory_system_integrity_sid): Define. * wincap.h: Define has_mandatory_integrity_control throughout. * wincap.cc: Ditto. --- winsup/cygwin/wincap.cc | 13 +++++++++++++ 1 file changed, 13 insertions(+) (limited to 'winsup/cygwin/wincap.cc') diff --git a/winsup/cygwin/wincap.cc b/winsup/cygwin/wincap.cc index df6765b7b..8879f9e06 100644 --- a/winsup/cygwin/wincap.cc +++ b/winsup/cygwin/wincap.cc @@ -68,6 +68,7 @@ static NO_COPY wincaps wincap_unknown = { has_fileid_dirinfo:false, has_exclusiveaddruse:false, has_buggy_restart_scan:false, + has_mandatory_integrity_control:false, }; static NO_COPY wincaps wincap_95 = { @@ -127,6 +128,7 @@ static NO_COPY wincaps wincap_95 = { has_fileid_dirinfo:false, has_exclusiveaddruse:false, has_buggy_restart_scan:false, + has_mandatory_integrity_control:false, }; static NO_COPY wincaps wincap_95osr2 = { @@ -186,6 +188,7 @@ static NO_COPY wincaps wincap_95osr2 = { has_fileid_dirinfo:false, has_exclusiveaddruse:false, has_buggy_restart_scan:false, + has_mandatory_integrity_control:false, }; static NO_COPY wincaps wincap_98 = { @@ -245,6 +248,7 @@ static NO_COPY wincaps wincap_98 = { has_fileid_dirinfo:false, has_exclusiveaddruse:false, has_buggy_restart_scan:false, + has_mandatory_integrity_control:false, }; static NO_COPY wincaps wincap_98se = { @@ -304,6 +308,7 @@ static NO_COPY wincaps wincap_98se = { has_fileid_dirinfo:false, has_exclusiveaddruse:false, has_buggy_restart_scan:false, + has_mandatory_integrity_control:false, }; static NO_COPY wincaps wincap_me = { @@ -363,6 +368,7 @@ static NO_COPY wincaps wincap_me = { has_fileid_dirinfo:false, has_exclusiveaddruse:false, has_buggy_restart_scan:false, + has_mandatory_integrity_control:false, }; static NO_COPY wincaps wincap_nt3 = { @@ -422,6 +428,7 @@ static NO_COPY wincaps wincap_nt3 = { has_fileid_dirinfo:false, has_exclusiveaddruse:false, has_buggy_restart_scan:false, + has_mandatory_integrity_control:false, }; static NO_COPY wincaps wincap_nt4 = { @@ -481,6 +488,7 @@ static NO_COPY wincaps wincap_nt4 = { has_fileid_dirinfo:false, has_exclusiveaddruse:false, has_buggy_restart_scan:false, + has_mandatory_integrity_control:false, }; static NO_COPY wincaps wincap_nt4sp4 = { @@ -540,6 +548,7 @@ static NO_COPY wincaps wincap_nt4sp4 = { has_fileid_dirinfo:false, has_exclusiveaddruse:true, has_buggy_restart_scan:false, + has_mandatory_integrity_control:false, }; static NO_COPY wincaps wincap_2000 = { @@ -599,6 +608,7 @@ static NO_COPY wincaps wincap_2000 = { has_fileid_dirinfo:true, has_exclusiveaddruse:true, has_buggy_restart_scan:true, + has_mandatory_integrity_control:false, }; static NO_COPY wincaps wincap_xp = { @@ -658,6 +668,7 @@ static NO_COPY wincaps wincap_xp = { has_fileid_dirinfo:true, has_exclusiveaddruse:true, has_buggy_restart_scan:false, + has_mandatory_integrity_control:false, }; static NO_COPY wincaps wincap_2003 = { @@ -717,6 +728,7 @@ static NO_COPY wincaps wincap_2003 = { has_fileid_dirinfo:true, has_exclusiveaddruse:true, has_buggy_restart_scan:false, + has_mandatory_integrity_control:false, }; static NO_COPY wincaps wincap_vista = { @@ -776,6 +788,7 @@ static NO_COPY wincaps wincap_vista = { has_fileid_dirinfo:true, has_exclusiveaddruse:true, has_buggy_restart_scan:false, + has_mandatory_integrity_control:true, }; wincapc wincap __attribute__((section (".cygwin_dll_common"), shared)); -- cgit v1.2.3