blob: cd6aac85f120a5e6764a49d8d46155bb2b9a7c4e (
plain) (
tree)
|
|
/*++ BUILD Version: 0001 // Increment this if a change has global effects
Copyright (c) 1992 Microsoft Corporation
Module Name:
seposix.h
Abstract:
This file contains security related definitions that are private to
subsystems, such as Posix Id to Sid mappings
Author:
Scott Birrell (ScottBi) April 13, 1993
Environment:
User Mode - Win32
Revision History:
--*/
#ifndef _SEPOSIX_
#define _SEPOSIX_
//
// Posix Id definitions
//
// IMPORTANT NOTE:
//
// The Posix Id's for well known Sids and accounts in the local machine's
// BUILTIN in and Accounts have values not exceeding 0x3ffff. This is
// to allow storage of these Posix Ids in cpio archive file format.
// This format restricts the size of the values to fit within 6 octal
// digits, making 0x3ffff the highest possible value supportable.
//
//
// Posix Id's for universal well known Sids
//
#define SE_NULL_POSIX_ID ((ULONG) 0x00010000)
#define SE_WORLD_POSIX_ID ((ULONG) 0x00010100)
#define SE_LOCAL_POSIX_ID ((ULONG) 0x00010200)
#define SE_CREATOR_OWNER_POSIX_ID ((ULONG) 0x00010300)
#define SE_CREATOR_GROUP_POSIX_ID ((ULONG) 0x00010301)
#define SE_NON_UNIQUE_POSIX_ID ((ULONG) 0x00010400)
//
// Posix Id's for Nt well known Sids
//
#define SE_AUTHORITY_POSIX_ID ((ULONG) 0x00010500)
#define SE_DIALUP_POSIX_ID ((ULONG) 0x00010501)
#define SE_NETWORK_POSIX_ID ((ULONG) 0x00010502)
#define SE_BATCH_POSIX_ID ((ULONG) 0x00010503)
#define SE_INTERACTIVE_POSIX_ID ((ULONG) 0x00010504)
#define SE_DEFAULT_LOGON_POSIX_ID ((ULONG) 0x00010505)
#define SE_SERVICE_POSIX_ID ((ULONG) 0x00010506)
//
// Posix Offsets for Built In Domain, Account Domain and Primary Domain
//
// NOTE: The Posix Id of an account in one of these domains is given
// by the formula:
//
// Posix Id = Domain Posix Offset + Relative Id
//
// where 'Relative Id' is the lowest sub authority in the account's
// Sid
//
#define SE_NULL_POSIX_OFFSET ((ULONG) 0x00000000)
#define SE_BUILT_IN_DOMAIN_POSIX_OFFSET ((ULONG) 0x00020000)
#define SE_ACCOUNT_DOMAIN_POSIX_OFFSET ((ULONG) 0x00030000)
//
// NOTE: The following is valid for workstations that have joined a
// domain only.
//
#define SE_PRIMARY_DOMAIN_POSIX_OFFSET ((ULONG) 0x00100000)
//
// Seed and increment for Trusted Domain Posix Offsets
//
#define SE_INITIAL_TRUSTED_DOMAIN_POSIX_OFFSET ((ULONG) 0x00200000)
#define SE_TRUSTED_DOMAIN_POSIX_OFFSET_INCR ((ULONG) 0x00100000)
#define SE_MAX_TRUSTED_DOMAIN_POSIX_OFFSET ((ULONG) 0xfff00000)
#endif // _SEPOSIX_
|
