Decoded the GENERIC_ALL flag in secaudit

The GENERIC_ALL flags was not decoded and could lead to displaying no
access to some directories.
edge.strict_endians
Jean-Pierre André 2014-05-22 09:01:37 +02:00
parent 5554f2e677
commit c9b0c415fd
2 changed files with 10 additions and 6 deletions

View File

@ -206,6 +206,8 @@
*
* Sep 2013, version 1.4.1
* - silenced an aliasing warning by gcc >= 4.8
*
* - decoded GENERIC_ALL permissions
*/
/*

View File

@ -561,12 +561,14 @@ enum {
/* flags tested for meaning exec, write or read */
/* tests for write allow for interpretation of a sticky bit */
#define FILE_GREAD (FILE_READ_DATA | GENERIC_READ)
#define FILE_GWRITE (FILE_WRITE_DATA | FILE_APPEND_DATA | GENERIC_WRITE)
#define FILE_GEXEC (FILE_EXECUTE | GENERIC_EXECUTE)
#define DIR_GREAD (FILE_LIST_DIRECTORY | GENERIC_READ)
#define DIR_GWRITE (FILE_ADD_FILE | FILE_ADD_SUBDIRECTORY | GENERIC_WRITE)
#define DIR_GEXEC (FILE_TRAVERSE | GENERIC_EXECUTE)
#define FILE_GREAD (FILE_READ_DATA | GENERIC_READ | GENERIC_ALL)
#define FILE_GWRITE (FILE_WRITE_DATA | FILE_APPEND_DATA | GENERIC_WRITE \
| GENERIC_ALL)
#define FILE_GEXEC (FILE_EXECUTE | GENERIC_EXECUTE | GENERIC_ALL)
#define DIR_GREAD (FILE_LIST_DIRECTORY | GENERIC_READ | GENERIC_ALL)
#define DIR_GWRITE (FILE_ADD_FILE | FILE_ADD_SUBDIRECTORY | GENERIC_WRITE \
| GENERIC_ALL)
#define DIR_GEXEC (FILE_TRAVERSE | GENERIC_EXECUTE | GENERIC_ALL)
/* standard owner (and administrator) rights */