summaryrefslogtreecommitdiffhomepage
path: root/src
diff options
context:
space:
mode:
authormidipix <writeonce@midipix.org>2018-10-11 19:09:17 -0400
committermidipix <writeonce@midipix.org>2018-10-12 13:59:03 -0400
commit5c3887a3ebe7ea024d60e986e1c52dc7d891b573 (patch)
tree02231105aa889e0865037b7ab57b08aa05711975 /src
parent2e04e9516e6e560e8c534e00df1d57eab6e6a174 (diff)
downloadntapi-5c3887a3ebe7ea024d60e986e1c52dc7d891b573.tar.bz2
ntapi-5c3887a3ebe7ea024d60e986e1c52dc7d891b573.tar.xz
__ntapi_acl_init_common_descriptor(): disallow inheritance of parent ACEs.
Diffstat (limited to 'src')
-rw-r--r--src/acl/ntapi_acl_helper.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/acl/ntapi_acl_helper.c b/src/acl/ntapi_acl_helper.c
index 024dbd4..6940f90 100644
--- a/src/acl/ntapi_acl_helper.c
+++ b/src/acl/ntapi_acl_helper.c
@@ -63,7 +63,7 @@ void __stdcall __ntapi_acl_init_common_descriptor(
/* sd header */
sd->sd.revision = 1;
sd->sd.sbz_1st = 0;
- sd->sd.control = NT_SE_SELF_RELATIVE | NT_SE_DACL_PRESENT;
+ sd->sd.control = NT_SE_SELF_RELATIVE | NT_SE_DACL_PRESENT | NT_SE_DACL_PROTECTED;
sd->sd.offset_owner = __offsetof(nt_sd_common_buffer,owner);
sd->sd.offset_group = 0;
sd->sd.offset_dacl = __offsetof(nt_sd_common_buffer,dacl);