From 2c26a1680e772dd35bb90c678a363e1b7a9eb041 Mon Sep 17 00:00:00 2001
From: midipix <writeonce@midipix.org>
Date: Jun 08 2020 20:32:06 +0000
Subject: toks_get_driver_ctx(): use explicit access bits for the ipc object directory.


---

diff --git a/src/driver/toks_driver_ctx.c b/src/driver/toks_driver_ctx.c
index 44fd9ef..8f460f7 100644
--- a/src/driver/toks_driver_ctx.c
+++ b/src/driver/toks_driver_ctx.c
@@ -365,7 +365,11 @@ int toks_get_driver_ctx(
 
 	if ((ntapi->tt_open_dev_object_directory(
 			&ctx->hsvcdir,
-			NT_DIRECTORY_ALL_ACCESS,
+			NT_SEC_READ_CONTROL
+				| NT_DIRECTORY_QUERY
+				| NT_DIRECTORY_TRAVERSE
+				| NT_DIRECTORY_CREATE_OBJECT
+				| NT_DIRECTORY_CREATE_SUBDIRECTORY,
 			toks_service_name,
 			&toks_daemon_default_guid)))
 		return toks_get_driver_ctx_fail(meta);