diff options
| author | midipix <writeonce@midipix.org> | 2020-05-14 05:17:03 +0000 |
|---|---|---|
| committer | midipix <writeonce@midipix.org> | 2020-05-14 05:21:20 +0000 |
| commit | 6949e6d68321254c548457c5f1f25e744cdfd90c (patch) | |
| tree | 5ad11f11b1072ea5ecf2d47408c086b5c79e0b8c /src | |
| parent | 31887fae757cfc784c995f420bff05c7d7bab5f8 (diff) | |
| download | ntapi-6949e6d68321254c548457c5f1f25e744cdfd90c.tar.bz2 ntapi-6949e6d68321254c548457c5f1f25e744cdfd90c.tar.xz | |
__ntapi_init(): [never hurts to try to] __ntapi_init_adjust_privileges().
Diffstat (limited to 'src')
| -rw-r--r-- | src/internal/ntapi.c | 36 |
1 files changed, 33 insertions, 3 deletions
diff --git a/src/internal/ntapi.c b/src/internal/ntapi.c index abddd1e..817a21f 100644 --- a/src/internal/ntapi.c +++ b/src/internal/ntapi.c @@ -89,6 +89,38 @@ static union __ntapi_img_rdata __ntapi_rdata = {{ #define import_table __ntapi_rdata.img_sec_data.__ntapi_import_table +static void __ntapi_init_adjust_privileges(void) +{ + uintptr_t buffer[64]; + nt_token_privileges * tokprivs; + + /* token privileges */ + tokprivs = (nt_token_privileges *)buffer; + tokprivs->privilege_count = 4; + + tokprivs->privileges[0].attributes = NT_SE_ENABLE_PRIVILEGE; + tokprivs->privileges[0].luid.low = NT_SE_CREATE_SYMBOLIC_LINK_PRIVILEGE; + tokprivs->privileges[0].luid.high = 0; + + tokprivs->privileges[1].attributes = NT_SE_ENABLE_PRIVILEGE; + tokprivs->privileges[1].luid.low = NT_SE_TAKE_OWNERSHIP_PRIVILEGE; + tokprivs->privileges[1].luid.high = 0; + + tokprivs->privileges[2].attributes = NT_SE_ENABLE_PRIVILEGE; + tokprivs->privileges[2].luid.low = NT_SE_BACKUP_PRIVILEGE; + tokprivs->privileges[2].luid.high = 0; + + tokprivs->privileges[3].attributes = NT_SE_ENABLE_PRIVILEGE; + tokprivs->privileges[3].luid.low = NT_SE_RESTORE_PRIVILEGE; + tokprivs->privileges[3].luid.high = 0; + + /* (attempt to) set any or all */ + __ntapi->zw_adjust_privileges_token( + internals->htoken,0,tokprivs, + 0,0,0); +} + + static int32_t __fastcall __ntapi_init_once(ntapi_vtbl ** pvtbl) { int32_t status; @@ -501,9 +533,7 @@ static int32_t __fastcall __ntapi_init_once(ntapi_vtbl ** pvtbl) &internals->htoken))) return status; - __ntapi->tt_enable_token_privilege( - internals->htoken, - NT_SE_CREATE_SYMBOLIC_LINK_PRIVILEGE); + __ntapi_init_adjust_privileges(); /* user */ if ((status = __ntapi->zw_query_information_token( |