diff --git a/src/secaudit.c b/src/secaudit.c index ca2264f5..b419047b 100644 --- a/src/secaudit.c +++ b/src/secaudit.c @@ -206,6 +206,8 @@ * * Sep 2013, version 1.4.1 * - silenced an aliasing warning by gcc >= 4.8 + * + * - decoded GENERIC_ALL permissions */ /* diff --git a/src/secaudit.h b/src/secaudit.h index ce59d683..a8ad163f 100644 --- a/src/secaudit.h +++ b/src/secaudit.h @@ -561,12 +561,14 @@ enum { /* flags tested for meaning exec, write or read */ /* tests for write allow for interpretation of a sticky bit */ -#define FILE_GREAD (FILE_READ_DATA | GENERIC_READ) -#define FILE_GWRITE (FILE_WRITE_DATA | FILE_APPEND_DATA | GENERIC_WRITE) -#define FILE_GEXEC (FILE_EXECUTE | GENERIC_EXECUTE) -#define DIR_GREAD (FILE_LIST_DIRECTORY | GENERIC_READ) -#define DIR_GWRITE (FILE_ADD_FILE | FILE_ADD_SUBDIRECTORY | GENERIC_WRITE) -#define DIR_GEXEC (FILE_TRAVERSE | GENERIC_EXECUTE) +#define FILE_GREAD (FILE_READ_DATA | GENERIC_READ | GENERIC_ALL) +#define FILE_GWRITE (FILE_WRITE_DATA | FILE_APPEND_DATA | GENERIC_WRITE \ + | GENERIC_ALL) +#define FILE_GEXEC (FILE_EXECUTE | GENERIC_EXECUTE | GENERIC_ALL) +#define DIR_GREAD (FILE_LIST_DIRECTORY | GENERIC_READ | GENERIC_ALL) +#define DIR_GWRITE (FILE_ADD_FILE | FILE_ADD_SUBDIRECTORY | GENERIC_WRITE \ + | GENERIC_ALL) +#define DIR_GEXEC (FILE_TRAVERSE | GENERIC_EXECUTE | GENERIC_ALL) /* standard owner (and administrator) rights */