Add "NT Authority\System" with Full Access to the default registry security
authorgd <gd@0c0555d6-39d7-0310-84fc-f1cc0bd64818>
Wed, 26 Sep 2007 21:46:43 +0000 (21:46 +0000)
committergd <gd@0c0555d6-39d7-0310-84fc-f1cc0bd64818>
Wed, 26 Sep 2007 21:46:43 +0000 (21:46 +0000)
descriptor.

Guenther

git-svn-id: svn+ssh://svn.samba.org/data/svn/samba/branches/SAMBA_3_2@25362 0c0555d6-39d7-0310-84fc-f1cc0bd64818

source/registry/reg_frontend_hilvl.c

index 4ae1801..bc2f66f 100644 (file)
@@ -34,7 +34,7 @@ static struct generic_mapping reg_generic_map =
 
 static SEC_DESC* construct_registry_sd( TALLOC_CTX *ctx )
 {
-       SEC_ACE ace[2]; 
+       SEC_ACE ace[3];
        SEC_ACCESS mask;
        size_t i = 0;
        SEC_DESC *sd;
@@ -50,7 +50,12 @@ static SEC_DESC* construct_registry_sd( TALLOC_CTX *ctx )
        
        init_sec_access(&mask, REG_KEY_ALL );
        init_sec_ace(&ace[i++], &global_sid_Builtin_Administrators, SEC_ACE_TYPE_ACCESS_ALLOWED, mask, 0);
-       
+
+       /* Full Access 'NT Authority\System' */
+
+       init_sec_access(&mask, REG_KEY_ALL );
+       init_sec_ace(&ace[i++], &global_sid_System, SEC_ACE_TYPE_ACCESS_ALLOWED, mask, 0);
+
        
        /* create the security descriptor */