确定适当的访问控制.pptVIP

第六章 确定适当的访问控制 对ACE进行正确的排序 EXPLICIT_ACCESS ea; ZeroMemory(ea,sizeof(EXPLICIT_ACCESS)); DWORD cbSid=SECURITY_MAX_SID_SIZE; sidAuthUsers=LocalAlloc(LMEM_FIXED, cbSid); if(sidAuthUsers==NULL) throw ERROR_NOT_ENOUGH_MEMORY; if(!CreateWellKnownSid(WinAuthenticatedUserSid, NULL, sidAuthUsers, cbSid)) throw GetLastError(); BuildTrusteeWithSid(ea.Trustee, sidAuthUsers); ea.grfAccessPermissions=GENERIC_READ; ea.grfAccessMode=SET_ACCESS; ea.grfInheritance=NO_INHERITANCE; ea.Trustee.TrusteeForm=TRUSTEE_IS_SID; ea.Trustee.TrusteeType=TRUSTEE_IS_GROUP; dwErr=SetEntri