From e1cbd38d47f73ad4e386a593278de04e03451c30 Mon Sep 17 00:00:00 2001
From: midipix <writeonce@midipix.org>
Date: Dec 24 2019 12:08:35 +0000
Subject: __ipc_sd_init(): add missing rights (authenticated_users) and acl's.


---

diff --git a/src/object/ntapi_tt_keyed_object_directory.c b/src/object/ntapi_tt_keyed_object_directory.c
index 988ed00..6e7352e 100644
--- a/src/object/ntapi_tt_keyed_object_directory.c
+++ b/src/object/ntapi_tt_keyed_object_directory.c
@@ -93,7 +93,7 @@ static void __ipc_sd_init(nt_sd_common_buffer * sd, int fdir)
 	} else {
 		mask_system = NT_SYMBOLIC_LINK_ALL_ACCESS;
 		mask_owner  = NT_SYMBOLIC_LINK_ALL_ACCESS;
-		mask_other  = NT_SYMBOLIC_LINK_QUERY;
+		mask_other  = NT_SYMBOLIC_LINK_ALL_ACCESS;
 	}
 
 	/* sd header */
@@ -115,6 +115,8 @@ static void __ipc_sd_init(nt_sd_common_buffer * sd, int fdir)
 	ace = (nt_access_allowed_ace *)&sd->buffer;
 	ace = __ipc_ace_init(ace,mask_system,&(nt_sid){1,1,{{0,0,0,0,0,5}},{18}});
 	ace = __ipc_ace_init(ace,mask_other,&(nt_sid){1,1,{{0,0,0,0,0,5}},{11}});
+	ace = __ipc_ace_init(ace,mask_owner,(nt_sid *)&(nt_sid_os){1,2,{{0,0,0,0,0,5}},{32,544}});
+	ace = __ipc_ace_init(ace,mask_owner,&(nt_sid){1,1,{{0,0,0,0,0,3}},{4}});
 	ace = __ipc_ace_init(ace,mask_owner,(nt_sid *)&sd->owner);
 
 	sd->dacl.acl_revision   = 0x02;