From 03894de3abb02045a10886ba40f94bf9a4d8a530 Mon Sep 17 00:00:00 2001 From: Joseph Sutton Date: Tue, 29 Mar 2022 10:03:55 +1300 Subject: [PATCH] rpc_server/lsa: Match Windows security descriptor Signed-off-by: Joseph Sutton Reviewed-by: Jeremy Allison --- source4/rpc_server/lsa/lsa_init.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/source4/rpc_server/lsa/lsa_init.c b/source4/rpc_server/lsa/lsa_init.c index cd4a1569aea..689634b9706 100644 --- a/source4/rpc_server/lsa/lsa_init.c +++ b/source4/rpc_server/lsa/lsa_init.c @@ -30,13 +30,14 @@ "O:BAG:SY" \ "D:" \ "(D;;0x00000800;;;AN)" \ - "(A;;GA;;;BA)" \ - "(A;;GX;;;WD)" \ + "(A;;0x000f1fff;;;BA)" \ + "(A;;0x00020801;;;WD)" \ "(A;;0x00000801;;;AN)" \ "(A;;0x00001000;;;LS)" \ "(A;;0x00001000;;;NS)" \ "(A;;0x00001000;;;S-1-5-17)" \ - "(A;;0x00000801;;;S-1-15-2-1)" + "(A;;0x00000801;;;AC)" \ + "(A;;0x00000801;;;S-1-15-2-2)" static const struct generic_mapping dcesrv_lsa_policy_mapping = { LSA_POLICY_READ, -- 2.47.3