r25362: Add "NT Authority\System" with Full Access to the default registry security

descriptor.

Guenther
(This used to be commit ddc6d051115577b27529c46ff98267517218fe59)

diff --git a/source3/registry/reg_frontend_hilvl.c b/source3/registry/reg_frontend_hilvl.c
index 4ae1801a6158e26177fcbd3fbf1edbb0f0644618..bc2f66f25a7b53d2faa74b3cb4c93a955d860b26 100644 (file)
--- a/source3/registry/reg_frontend_hilvl.c
+++ b/source3/registry/reg_frontend_hilvl.c
@@ -34,7 +34,7 @@ static struct generic_mapping reg_generic_map =
 
 static SEC_DESC* construct_registry_sd( TALLOC_CTX *ctx )
 {
-       SEC_ACE ace[2]; 
+       SEC_ACE ace[3];
        SEC_ACCESS mask;
        size_t i = 0;
        SEC_DESC *sd;
@@ -50,7 +50,12 @@ static SEC_DESC* construct_registry_sd( TALLOC_CTX *ctx )
        
        init_sec_access(&mask, REG_KEY_ALL );
        init_sec_ace(&ace[i++], &global_sid_Builtin_Administrators, SEC_ACE_TYPE_ACCESS_ALLOWED, mask, 0);
-       
+
+       /* Full Access 'NT Authority\System' */
+
+       init_sec_access(&mask, REG_KEY_ALL );
+       init_sec_ace(&ace[i++], &global_sid_System, SEC_ACE_TYPE_ACCESS_ALLOWED, mask, 0);
+
        
        /* create the security descriptor */