1
2/*
3   Unix SMB/CIFS implementation.
4   SMB parameters and setup
5   Copyright (C) Andrew Tridgell 1992-1997
6   Copyright (C) Luke Kenneth Casson Leighton 1996-1997
7   Copyright (C) Paul Ashton 1997
8   Copyright (C) Simo Sorce 2003
9   Copyright (C) Gerald (Jerry) Carter 2005
10
11   This program is free software; you can redistribute it and/or modify
12   it under the terms of the GNU General Public License as published by
13   the Free Software Foundation; either version 2 of the License, or
14   (at your option) any later version.
15
16   This program is distributed in the hope that it will be useful,
17   but WITHOUT ANY WARRANTY; without even the implied warranty of
18   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
19   GNU General Public License for more details.
20
21   You should have received a copy of the GNU General Public License
22   along with this program; if not, write to the Free Software
23   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
24*/
25
26#ifndef PRIVILEGES_H
27#define PRIVILEGES_H
28
29/* privilege bitmask */
30
31#define SE_PRIV_MASKSIZE 4
32
33typedef struct {
34	uint32 mask[SE_PRIV_MASKSIZE];
35} SE_PRIV;
36
37
38/* common privilege defines */
39
40#define SE_END				{ { 0x00000000, 0x00000000, 0x00000000, 0x00000000 } }
41#define SE_NONE				{ { 0x00000000, 0x00000000, 0x00000000, 0x00000000 } }
42#define SE_ALL_PRIVS                    { { 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF } }
43
44
45/*
46 * We will use our own set of privileges since it makes no sense
47 * to implement all of the Windows set when only a portion will
48 * be used.  Use 128-bit mask to give room to grow.
49 */
50
51#define SE_NETWORK_LOGON		{ { 0x00000001, 0x00000000, 0x00000000, 0x00000000 } }
52#define SE_INTERACTIVE_LOGON		{ { 0x00000002, 0x00000000, 0x00000000, 0x00000000 } }
53#define SE_BATCH_LOGON			{ { 0x00000004, 0x00000000, 0x00000000, 0x00000000 } }
54#define SE_SERVICE_LOGON		{ { 0x00000008, 0x00000000, 0x00000000, 0x00000000 } }
55#define SE_MACHINE_ACCOUNT		{ { 0x00000010, 0x00000000, 0x00000000, 0x00000000 } }
56#define SE_PRINT_OPERATOR		{ { 0x00000020, 0x00000000, 0x00000000, 0x00000000 } }
57#define SE_ADD_USERS			{ { 0x00000040, 0x00000000, 0x00000000, 0x00000000 } }
58#define SE_DISK_OPERATOR		{ { 0x00000080, 0x00000000, 0x00000000, 0x00000000 } }
59#define SE_REMOTE_SHUTDOWN		{ { 0x00000100, 0x00000000, 0x00000000, 0x00000000 } }
60#define SE_BACKUP			{ { 0x00000200, 0x00000000, 0x00000000, 0x00000000 } }
61#define SE_RESTORE			{ { 0x00000400, 0x00000000, 0x00000000, 0x00000000 } }
62#define SE_TAKE_OWNERSHIP		{ { 0x00000800, 0x00000000, 0x00000000, 0x00000000 } }
63
64/* defined in lib/privilegs.c */
65
66extern const SE_PRIV se_priv_none;
67extern const SE_PRIV se_machine_account;
68extern const SE_PRIV se_print_operator;
69extern const SE_PRIV se_add_users;
70extern const SE_PRIV se_disk_operators;
71extern const SE_PRIV se_remote_shutdown;
72extern const SE_PRIV se_restore;
73extern const SE_PRIV se_take_ownership;
74
75
76/*
77 * These are used in Lsa replies (srv_lsa_nt.c)
78 */
79#define PR_NONE                0x0000
80#define PR_LOG_ON_LOCALLY      0x0001
81#define PR_ACCESS_FROM_NETWORK 0x0002
82#define PR_LOG_ON_BATCH_JOB    0x0004
83#define PR_LOG_ON_SERVICE      0x0010
84
85
86typedef struct {
87	uint32 high;
88	uint32 low;
89} LUID;
90
91typedef struct {
92	LUID luid;
93	uint32 attr;
94} LUID_ATTR;
95
96#ifndef _UPPER_BOOL
97typedef int BOOL;
98#define _UPPER_BOOL
99#endif
100
101typedef struct {
102	TALLOC_CTX *mem_ctx;
103	BOOL ext_ctx;
104	uint32 count;
105	uint32 control;
106	LUID_ATTR *set;
107} PRIVILEGE_SET;
108
109typedef struct {
110	SE_PRIV se_priv;
111	const char *name;
112	const char *description;
113	LUID luid;
114} PRIVS;
115
116#endif /* PRIVILEGES_H */
117