From f633746280b3556b1dada2fe6d19427ff841e9aa Mon Sep 17 00:00:00 2001
From: Pierre Schweitzer <pierre@reactos.org>
Date: Sun, 21 Jun 2015 08:07:11 +0000
Subject: [PATCH] [NTOSKNRL] As shown by the non commited yet tests from
 Thomas, we have to check for privilege in NtSetSystemInformation -
 SystemFlagsInformation

svn path=/trunk/; revision=68224
---
 reactos/ntoskrnl/ex/sysinfo.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/reactos/ntoskrnl/ex/sysinfo.c b/reactos/ntoskrnl/ex/sysinfo.c
index 3589d65d303..b77e0a1089f 100644
--- a/reactos/ntoskrnl/ex/sysinfo.c
+++ b/reactos/ntoskrnl/ex/sysinfo.c
@@ -1080,6 +1080,12 @@ SSI_DEF(SystemFlagsInformation)
     {
         return STATUS_INFO_LENGTH_MISMATCH;
     }
+
+    if (!SeSinglePrivilegeCheck(SeDebugPrivilege, ExGetPreviousMode()))
+    {
+        return STATUS_ACCESS_DENIED;
+    }
+
     NtGlobalFlag = ((PSYSTEM_FLAGS_INFORMATION) Buffer)->Flags;
     return STATUS_SUCCESS;
 }
-- 
2.17.1