[NTOSKNRL]
authorPierre Schweitzer <pierre@reactos.org>
Sun, 21 Jun 2015 08:07:11 +0000 (08:07 +0000)
committerPierre Schweitzer <pierre@reactos.org>
Sun, 21 Jun 2015 08:07:11 +0000 (08:07 +0000)
As shown by the non commited yet tests from Thomas, we have to check for privilege in NtSetSystemInformation - SystemFlagsInformation

svn path=/trunk/; revision=68224

reactos/ntoskrnl/ex/sysinfo.c

index 3589d65..b77e0a1 100644 (file)
@@ -1080,6 +1080,12 @@ SSI_DEF(SystemFlagsInformation)
     {
         return STATUS_INFO_LENGTH_MISMATCH;
     }
     {
         return STATUS_INFO_LENGTH_MISMATCH;
     }
+
+    if (!SeSinglePrivilegeCheck(SeDebugPrivilege, ExGetPreviousMode()))
+    {
+        return STATUS_ACCESS_DENIED;
+    }
+
     NtGlobalFlag = ((PSYSTEM_FLAGS_INFORMATION) Buffer)->Flags;
     return STATUS_SUCCESS;
 }
     NtGlobalFlag = ((PSYSTEM_FLAGS_INFORMATION) Buffer)->Flags;
     return STATUS_SUCCESS;
 }