rpc_server/lsa: Match Windows security descriptor

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Jeremy Allison <jra@samba.org>

diff --git a/source4/rpc_server/lsa/lsa_init.c b/source4/rpc_server/lsa/lsa_init.c
index cd4a1569aea131324cff6030a00a6b07fa90fef2..689634b9706fc8dbaf2a3429419f16a3f8920f54 100644 (file)
--- a/source4/rpc_server/lsa/lsa_init.c
+++ b/source4/rpc_server/lsa/lsa_init.c
@@ -30,13 +30,14 @@
        "O:BAG:SY" \
        "D:" \
        "(D;;0x00000800;;;AN)" \
-       "(A;;GA;;;BA)" \
-       "(A;;GX;;;WD)" \
+       "(A;;0x000f1fff;;;BA)" \
+       "(A;;0x00020801;;;WD)" \
        "(A;;0x00000801;;;AN)" \
        "(A;;0x00001000;;;LS)" \
        "(A;;0x00001000;;;NS)" \
        "(A;;0x00001000;;;S-1-5-17)" \
-       "(A;;0x00000801;;;S-1-15-2-1)"
+       "(A;;0x00000801;;;AC)" \
+       "(A;;0x00000801;;;S-1-15-2-2)"
 
 static const struct generic_mapping dcesrv_lsa_policy_mapping = {
        LSA_POLICY_READ,