Rebase against 52ba1b498a9694daf804c9aea99c788bb4e753a3.

This commit is contained in:
Zebediah Figura
2021-07-01 16:56:20 -05:00
parent 8988a92bee
commit a7ae280480
15 changed files with 70 additions and 1012 deletions

View File

@@ -1,4 +1,4 @@
From 2fc3173016ecac56e884b2bc92f2aab3de3240ee Mon Sep 17 00:00:00 2001
From 9804dd77fd8c0ec56963306f409fea6b910bb48d Mon Sep 17 00:00:00 2001
From: Zebediah Figura <z.figura12@gmail.com>
Date: Sun, 7 Feb 2021 22:54:19 -0600
Subject: [PATCH] server: Create processes using a limited administrator token
@@ -10,15 +10,15 @@ Signed-off-by: Zebediah Figura <z.figura12@gmail.com>
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/server/process.c b/server/process.c
index 9288bcc27d5..50295cc0202 100644
index 15387a2affa..3a8bbdbfb2e 100644
--- a/server/process.c
+++ b/server/process.c
@@ -664,7 +664,7 @@ struct process *create_process( int fd, struct process *parent, unsigned int fla
if (!parent)
{
process->handles = alloc_handle_table( process, 0 );
- process->token = token_create_admin( TRUE, -1, TokenElevationTypeFull );
+ process->token = token_create_admin( TRUE, -1, TokenElevationTypeLimited );
- process->token = token_create_admin( TRUE, -1, TokenElevationTypeFull, default_session_id );
+ process->token = token_create_admin( TRUE, -1, TokenElevationTypeLimited, default_session_id );
process->affinity = ~0;
}
else