Compartir a través de

2.4.7 SECURITY_INFORMATION

  • Artículo

The SECURITY_INFORMATION data type identifies the object-related security information being set or queried. This security information includes:

  • The owner of an object.

  • The primary group of an object.

  • The discretionary access control list (DACL) of an object.

  • The system access control list (SACL) of an object.

An unsigned 32-bit integer specifies portions of a SECURITY_DESCRIPTOR by means of bit flags. Individual bit values (combinable with the bitwise OR operation) are as shown in the following table.

Value

Meaning

OWNER_SECURITY_INFORMATION

0x00000001

The owner identifier of the object is being referenced.

GROUP_SECURITY_INFORMATION

0x00000002

The primary group identifier of the object is being referenced.

DACL_SECURITY_INFORMATION

0x00000004

The DACL of the object is being referenced.

SACL_SECURITY_INFORMATION

0x00000008

The SACL of the object is being referenced.

LABEL_SECURITY_INFORMATION

0x00000010

The mandatory integrity label is being referenced.

UNPROTECTED_SACL_SECURITY_INFORMATION

0x10000000

The SACL inherits access control entries (ACEs) from the parent object.

UNPROTECTED_DACL_SECURITY_INFORMATION

0x20000000

The DACL inherits ACEs from the parent object.

PROTECTED_SACL_SECURITY_INFORMATION

0x40000000

The SACL cannot inherit ACEs.

PROTECTED_DACL_SECURITY_INFORMATION

0x80000000

The DACL cannot inherit ACEs.

ATTRIBUTE_SECURITY_INFORMATION

0x00000020

A SYSTEM_RESOURCE_ATTRIBUTE_ACE (section 2.4.4.15) is being referenced.

SCOPE_SECURITY_INFORMATION

0x00000040

A SYSTEM_SCOPED_POLICY_ID_ACE (section 2.4.4.16) is being referenced.

PROCESS_TRUST_LABEL_SECURITY_INFORMATION

0x00000080

Reserved.

BACKUP_SECURITY_INFORMATION

0x00010000

The security descriptor is being accessed for use in a backup operation.

This type is declared as follows:

 typedef DWORD SECURITY_INFORMATION, *PSECURITY_INFORMATION;