1 2/* 3 Unix SMB/CIFS implementation. 4 SMB parameters and setup 5 Copyright (C) Andrew Tridgell 1992-1997 6 Copyright (C) Luke Kenneth Casson Leighton 1996-1997 7 Copyright (C) Paul Ashton 1997 8 Copyright (C) Simo Sorce 2003 9 Copyright (C) Gerald (Jerry) Carter 2005 10 11 This program is free software; you can redistribute it and/or modify 12 it under the terms of the GNU General Public License as published by 13 the Free Software Foundation; either version 2 of the License, or 14 (at your option) any later version. 15 16 This program is distributed in the hope that it will be useful, 17 but WITHOUT ANY WARRANTY; without even the implied warranty of 18 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 19 GNU General Public License for more details. 20 21 You should have received a copy of the GNU General Public License 22 along with this program; if not, write to the Free Software 23 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. 24*/ 25 26#ifndef PRIVILEGES_H 27#define PRIVILEGES_H 28 29/* privilege bitmask */ 30 31#define SE_PRIV_MASKSIZE 4 32 33typedef struct { 34 uint32 mask[SE_PRIV_MASKSIZE]; 35} SE_PRIV; 36 37 38/* common privilege defines */ 39 40#define SE_END { { 0x00000000, 0x00000000, 0x00000000, 0x00000000 } } 41#define SE_NONE { { 0x00000000, 0x00000000, 0x00000000, 0x00000000 } } 42#define SE_ALL_PRIVS { { 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF } } 43 44 45/* 46 * We will use our own set of privileges since it makes no sense 47 * to implement all of the Windows set when only a portion will 48 * be used. Use 128-bit mask to give room to grow. 49 */ 50 51#define SE_NETWORK_LOGON { { 0x00000001, 0x00000000, 0x00000000, 0x00000000 } } 52#define SE_INTERACTIVE_LOGON { { 0x00000002, 0x00000000, 0x00000000, 0x00000000 } } 53#define SE_BATCH_LOGON { { 0x00000004, 0x00000000, 0x00000000, 0x00000000 } } 54#define SE_SERVICE_LOGON { { 0x00000008, 0x00000000, 0x00000000, 0x00000000 } } 55#define SE_MACHINE_ACCOUNT { { 0x00000010, 0x00000000, 0x00000000, 0x00000000 } } 56#define SE_PRINT_OPERATOR { { 0x00000020, 0x00000000, 0x00000000, 0x00000000 } } 57#define SE_ADD_USERS { { 0x00000040, 0x00000000, 0x00000000, 0x00000000 } } 58#define SE_DISK_OPERATOR { { 0x00000080, 0x00000000, 0x00000000, 0x00000000 } } 59#define SE_REMOTE_SHUTDOWN { { 0x00000100, 0x00000000, 0x00000000, 0x00000000 } } 60#define SE_BACKUP { { 0x00000200, 0x00000000, 0x00000000, 0x00000000 } } 61#define SE_RESTORE { { 0x00000400, 0x00000000, 0x00000000, 0x00000000 } } 62#define SE_TAKE_OWNERSHIP { { 0x00000800, 0x00000000, 0x00000000, 0x00000000 } } 63 64/* defined in lib/privilegs.c */ 65 66extern const SE_PRIV se_priv_none; 67extern const SE_PRIV se_machine_account; 68extern const SE_PRIV se_print_operator; 69extern const SE_PRIV se_add_users; 70extern const SE_PRIV se_disk_operators; 71extern const SE_PRIV se_remote_shutdown; 72extern const SE_PRIV se_restore; 73extern const SE_PRIV se_take_ownership; 74 75 76/* 77 * These are used in Lsa replies (srv_lsa_nt.c) 78 */ 79#define PR_NONE 0x0000 80#define PR_LOG_ON_LOCALLY 0x0001 81#define PR_ACCESS_FROM_NETWORK 0x0002 82#define PR_LOG_ON_BATCH_JOB 0x0004 83#define PR_LOG_ON_SERVICE 0x0010 84 85 86typedef struct { 87 uint32 high; 88 uint32 low; 89} LUID; 90 91typedef struct { 92 LUID luid; 93 uint32 attr; 94} LUID_ATTR; 95 96#ifndef _UPPER_BOOL 97typedef int BOOL; 98#define _UPPER_BOOL 99#endif 100 101typedef struct { 102 TALLOC_CTX *mem_ctx; 103 BOOL ext_ctx; 104 uint32 count; 105 uint32 control; 106 LUID_ATTR *set; 107} PRIVILEGE_SET; 108 109typedef struct { 110 SE_PRIV se_priv; 111 const char *name; 112 const char *description; 113 LUID luid; 114} PRIVS; 115 116#endif /* PRIVILEGES_H */ 117