[ros-diffs] [hpoussin] 27409: ReactOS now supports ACLs... (fix SeAccessCheck to sometimes deny access)

hpoussin at svn.reactos.org hpoussin at svn.reactos.org
Thu Jul 5 19:01:02 CEST 2007


Author: hpoussin
Date: Thu Jul  5 21:01:02 2007
New Revision: 27409

URL: http://svn.reactos.org/svn/reactos?rev=27409&view=rev
Log:
ReactOS now supports ACLs... (fix SeAccessCheck to sometimes deny access)

Modified:
    trunk/reactos/ntoskrnl/se/semgr.c

Modified: trunk/reactos/ntoskrnl/se/semgr.c
URL: http://svn.reactos.org/svn/reactos/trunk/reactos/ntoskrnl/se/semgr.c?rev=27409&r1=27408&r2=27409&view=diff
==============================================================================
--- trunk/reactos/ntoskrnl/se/semgr.c (original)
+++ trunk/reactos/ntoskrnl/se/semgr.c Thu Jul  5 21:01:02 2007
@@ -33,9 +33,6 @@
 NTAPI
 SepInitializationPhase0(VOID)
 {
-    DPRINT1("FIXME: SeAccessCheck has been HACKED to always grant access!\n");
-    DPRINT1("FIXME: Please fix all the code that doesn't get proper rights!\n");
-
     SepInitLuid();
     if (!SepInitSecurityIDs()) return FALSE;
     if (!SepInitDACLs()) return FALSE;
@@ -1155,17 +1152,10 @@
     }
   else
     {
-#if 1
-      *AccessStatus = STATUS_SUCCESS;
-      DPRINT1("FIX caller rights (granted 0x%lx, desired 0x%lx, generic mapping %p)!\n",
-        *GrantedAccess, DesiredAccess, GenericMapping);
-      return TRUE;
-#else
       DPRINT1("Denying access for caller: granted 0x%lx, desired 0x%lx (generic mapping %p)\n",
         *GrantedAccess, DesiredAccess, GenericMapping);
       *AccessStatus = STATUS_ACCESS_DENIED;
       return FALSE;
-#endif
     }
 }
 




More information about the Ros-diffs mailing list