From 6949e6d68321254c548457c5f1f25e744cdfd90c Mon Sep 17 00:00:00 2001
From: midipix <writeonce@midipix.org>
Date: Thu, 14 May 2020 05:17:03 +0000
Subject: __ntapi_init(): [never hurts to try to]
 __ntapi_init_adjust_privileges().

---
 src/internal/ntapi.c | 36 +++++++++++++++++++++++++++++++++---
 1 file changed, 33 insertions(+), 3 deletions(-)

diff --git a/src/internal/ntapi.c b/src/internal/ntapi.c
index abddd1e..817a21f 100644
--- a/src/internal/ntapi.c
+++ b/src/internal/ntapi.c
@@ -89,6 +89,38 @@ static union __ntapi_img_rdata __ntapi_rdata = {{
 #define import_table	__ntapi_rdata.img_sec_data.__ntapi_import_table
 
 
+static void __ntapi_init_adjust_privileges(void)
+{
+	uintptr_t		buffer[64];
+	nt_token_privileges *	tokprivs;
+
+	/* token privileges */
+	tokprivs = (nt_token_privileges *)buffer;
+	tokprivs->privilege_count = 4;
+
+	tokprivs->privileges[0].attributes = NT_SE_ENABLE_PRIVILEGE;
+	tokprivs->privileges[0].luid.low   = NT_SE_CREATE_SYMBOLIC_LINK_PRIVILEGE;
+	tokprivs->privileges[0].luid.high  = 0;
+
+	tokprivs->privileges[1].attributes = NT_SE_ENABLE_PRIVILEGE;
+	tokprivs->privileges[1].luid.low   = NT_SE_TAKE_OWNERSHIP_PRIVILEGE;
+	tokprivs->privileges[1].luid.high  = 0;
+
+	tokprivs->privileges[2].attributes = NT_SE_ENABLE_PRIVILEGE;
+	tokprivs->privileges[2].luid.low   = NT_SE_BACKUP_PRIVILEGE;
+	tokprivs->privileges[2].luid.high  = 0;
+
+	tokprivs->privileges[3].attributes = NT_SE_ENABLE_PRIVILEGE;
+	tokprivs->privileges[3].luid.low   = NT_SE_RESTORE_PRIVILEGE;
+	tokprivs->privileges[3].luid.high  = 0;
+
+	/* (attempt to) set any or all */
+	__ntapi->zw_adjust_privileges_token(
+		internals->htoken,0,tokprivs,
+		0,0,0);
+}
+
+
 static int32_t __fastcall __ntapi_init_once(ntapi_vtbl ** pvtbl)
 {
 	int32_t					status;
@@ -501,9 +533,7 @@ static int32_t __fastcall __ntapi_init_once(ntapi_vtbl ** pvtbl)
 			&internals->htoken)))
 		return status;
 
-	__ntapi->tt_enable_token_privilege(
-		internals->htoken,
-		NT_SE_CREATE_SYMBOLIC_LINK_PRIVILEGE);
+	__ntapi_init_adjust_privileges();
 
 	/* user */
 	if ((status = __ntapi->zw_query_information_token(
-- 
cgit v1.2.3