4 * Copyright (C) 2005 Robert Shearman
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
21 extern const LUID SeIncreaseQuotaPrivilege
;
22 extern const LUID SeSecurityPrivilege
;
23 extern const LUID SeTakeOwnershipPrivilege
;
24 extern const LUID SeLoadDriverPrivilege
;
25 extern const LUID SeSystemProfilePrivilege
;
26 extern const LUID SeSystemtimePrivilege
;
27 extern const LUID SeProfileSingleProcessPrivilege
;
28 extern const LUID SeIncreaseBasePriorityPrivilege
;
29 extern const LUID SeCreatePagefilePrivilege
;
30 extern const LUID SeBackupPrivilege
;
31 extern const LUID SeRestorePrivilege
;
32 extern const LUID SeShutdownPrivilege
;
33 extern const LUID SeDebugPrivilege
;
34 extern const LUID SeSystemEnvironmentPrivilege
;
35 extern const LUID SeChangeNotifyPrivilege
;
36 extern const LUID SeRemoteShutdownPrivilege
;
37 extern const LUID SeUndockPrivilege
;
38 extern const LUID SeManageVolumePrivilege
;
39 extern const LUID SeImpersonatePrivilege
;
40 extern const LUID SeCreateGlobalPrivilege
;
42 extern const PSID security_interactive_sid
;
44 extern struct token
*token_create_admin(void);
45 extern int token_check_privileges( struct token
*token
, int all_required
,
46 const LUID_AND_ATTRIBUTES
*reqprivs
,
47 unsigned int count
, LUID_AND_ATTRIBUTES
*usedprivs
);
48 extern const ACL
*token_get_default_dacl( struct token
*token
);
49 extern void security_set_thread_token( struct thread
*thread
, obj_handle_t handle
);
50 extern int check_object_access( struct object
*obj
, unsigned int *access
);
52 static inline int thread_single_check_privilege( struct thread
*thread
, const LUID
*priv
)
54 struct token
*token
= thread_get_impersonation_token( thread
);
55 const LUID_AND_ATTRIBUTES privs
= { *priv
, 0 };
57 if (!token
) return FALSE
;
59 return token_check_privileges( token
, TRUE
, &privs
, 1, NULL
);