able/windows-nt
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
windows-nt/Source/XPSP1/NT/mergedcomponents/setupinfs/perms.inx

603 lines
25 KiB
Plaintext
Raw Normal View History

Add source files
2020-09-26 03:20:57 -05:00
[version]
signature="$CHICAGO$"
ClassGUID={00000000-0000-0000-0000-000000000000}
LayoutFile=layout.inf
[Directories]
;
; ACLs for directories themselves
;
; LHS is directory: if starts with \ then relative to
; drive containing system, otherwise relative to sysroot
;
; RHS1 is ACL to put on directory itself; looked up in [ACL] section
; RHS2 is default ACL for files in that directory, looked up in [ACL section]
; If not present then files in that dir are not stamped with an ACL by default.
;
@@:@@:"" = d1,f1 ; don't use \ or we think it's x:\ (which is bad)
@@:@@:system32 = d1,f1
@@:@@:system32\config = d2,f1
@@:@@:system32\drivers = d3,f1
@@:@@:system = d1,f1
@@:@@:system32\ras = d4,f1
@@:@@:system32\spool = d5,f1
@@:@@:system32\spool\drivers = d5,f3
@@:@i:system32\spool\drivers\w32x86\2 = d5,f3
@@:@@:system32\spool\printers = d5,f3
@@:@@:system32\spool\prtprocs = d5,f3
@@:@i:system32\spool\prtprocs\w32x86 = d5,f3
@@:@@:system32\dhcp = d3,f1
@@:@@:repair = d11
@@:@@:system32\drivers\etc = d3,f1
@@:@i:system32\spool\drivers\w32x86 = d5,f1
@@:@@:system32\viewers = d1,f1
@@:@@:inf = d1,f1
@@:@@:help = d1,f1
@@:@@:fonts = d1,f1
@@:@@:config = d1,f1
@@:@@:Media = d1,f1
@@:@@:Cursors = d1,f1
@@:@@:system32\repl = d3
@@:@@:system32\repl\import = d7
@@:@@:system32\repl\import\scripts = d7
@@:@@:system32\repl\export = d7
@@:@@:system32\repl\export\scripts = d7
@@:@@:security\templates = d7,f1
\users = d8
\users\default = d9
\ = d10
\temp = d10
[FileOverride]
;
; Files that are not listed here get default for their directory
; The left hand side is the file name relative to sysroot. RHS is
; the ACL spec, which is looked up in [ACL]
;
system32\autoexec.nt = f2
system32\cmos.ram = f2
system32\config.nt = f2
system32\decpsmon.dll = f3
system32\decpsmon.hlp = f3
system32\hpmon.dll = f3
system32\hpmon.hlp = f3
system32\midimap.cfg = f2
win.ini = f4
[ExtraFiles]
;
; Use only for files that are not listed in layout.inf for some reason.
; LHS is path relative to sysroot (if not starting with \) or a full path
; for the drive with the system on it (starting with \)
;
; RHS is ACL.
;
system32\wins\system.mdb = f1
;
; ACE codes:
;
; Index Permission Inherit
;
; 1 AccountOpsRWXD Containers
; 2 AdminAll Containers, Objects
; 3 AdminRWXD Containers
; 4 CreatorOwnerAll Containers, Objects
; 5 NetUsersDenyAll Containers, Objects
; 6 PrintOperatorsAll Containers, Objects
; 7 ReplicatorRWXD Containers, Objects
; 8 ReplicatorRX Containers, Objects
; 9 SysOpsAll Containers, Objects
; 10 SysOpsRWXD Containers, Objects
; 11 WorldAll Containers, Objects
; 12 WorldRWX Containers
; 13 WorldRWXD Containers, Objects
; 14 WorldRX Containers
; 15 WorldRX Containers, Objects
; 16 WorldRWX Containers, Objects
; 17 SystemAll Containers, Objects
; 18 PowerUsersRWXD Containers, Objects
;
@s:[ServerACL]
@s:;
@s:; List of ACL profiles for server security
@s:;
@s:d1 = 2,13,4,10,17
@s:d2 = 14,4,2,17
@s:d3 = 15,4,2,9,17
@s:d4 = 15,4,2,9,13,17
@s:d5 = 15,4,2,9,6,17
@s:d6 = 2,4,9,15,17,18
@s:d7 = 15,10,2,7,4,17
@s:d8 = 14,3,1,17
@s:d9 = 12,4,17
@s:d10= 2,13,4,10,17
@s:d11= 2,17
@s:f1 = 2,15,10,17
@s:f2 = 2,13,10,17
@s:f3 = 2,15,9,6,17
@s:f4 = 11
@@:[WorkstationACL]
;
; List of ACL profiles for workstation security
; Also used for member servers so this section
; appears in both versions of the inf
;
@@:d1 = 2,13,4,17
@@:d2 = 2,4,14,17
@@:d3 = 15,4,2,17
@@:d4 = 15,4,2,13,17,18
@@:d5 = 15,4,2,17,18
@@:d6 = 2,4,15,17,18
@@:d7 = 15,2,7,4,17
@@:d8 = 14,3,17
@@:d9 = 12,4,17
@@:d10= 2,13,4,17
@@:d11= 2,17
@@:f1 = 2,15,17
@@:f2 = 2,13,17
@@:f3 = 2,15,17,18
@@:f4 = 11
@@:@i:[BootFiles]
@@:@i:;
@@:@i:; x86 boot files and the root of C:
@@:@i:;
@@:@i:\ = d1
@@:@i:\boot.ini = f1
@@:@i:\ntbootdd.sys = f1
@@:@i:\ntdetect.com = f1
@@:@i:\ntldr = f1
@@:@a:[BootFiles]
@@:@a:;
@@:@a:; amd64 boot files and the root of C:
@@:@a:;
@@:@a:\ = d1
@@:@a:\boot.ini = f1
@@:@a:\ntdetect.com = f1
@@:@a:\ntldr = f1
;
; ACE codes for the registry
;
; Index Permission Inherit
;
; 1 AdminFull Containers
; 2 AdminR Containers
; 3 AdminRW Containers
; 4 AdminRWD Containers
; 5 CreatorFull Containers
; 6 CreatorRW Containers
; 7 WorldFull Containers
; 8 WorldR Containers
; 9 WorldRW Containers
; 10 WorldRWD Containers
; 11 PowerUserFull Containers
; 12 PowerUserRW Containers
; 13 PowerUserRWD Containers
; 14 SystemOpFull Containers
; 15 SystemOpRW Containers
; 16 SystemOpRWD Containers
; 17 SystemFull Containers
; 18 SystemRW Containers
; 19 SystemR Containers
; 20 AdminRWE Containers
; 21 InteractiveUserFull Containers
; 22 InteractiveUserRead Containers
; 23 InteractiveUserRW Containers
; 24 InteractiveUserRWD Containers
; 25 NormalUsersRW Containers
;
[RegistryDACLs]
r1 = 1 ; [AdminFull]
r2 = 1,17 ; [AdminFull SystemFull]
r3 = 8,1 ; [WorldR AdminFull]
r4 = 8,1,5,17 ; [WorldR AdminFull CreatorFull SystemFull]
r5 = 8,1,5,16,17 ; [WorldR AdminFull CreatorFull SystemOpRWD SystemFull]
r6 = 8,1,5,16,13,17 ; [WorldR AdminFull CreatorFull SystemOpRWD PowerRWD SystemFull]
r7 = 8,1,17 ; [WorldR AdminFull SystemFull]
r8 = 8,1,15,17 ; [WorldR AdminFull SystemOpRW SystemFull]
r9 = 8,1,16,13,5,17 ; [WorldR AdminFull SystemOpRWD PowerRWD CreatorFull SystemFull]
r10= 8,1,14,5,17 ; [WorldR AdminFull SystemOpFull CreatorFull SystemFull]
r11= 8,1,15,12,5,17 ; [WorldR AdminFull SystemOpRW PowerRW CreatorFull SystemFull]
r12= 8,1,16,13,5,17 ; [WorldR AdminFull SystemOpRWD PowerRWD CreatorFull SystemFull]
r13= 8,4,17 ; [WorldR AdminRWD SystemFull]
r14= 8,24,1,5,17 ; [WorldR InteractiveRWD AdminFull CreatorFull SystemFull]
r15= 8,17 ; [WorldR SystemFull]
r16= 9,1,5,17 ; [WorldRW AdminFull CreatorFull SystemFull]
r17= 9,1,16,13,5,17 ; [WorldRW AdminFull SystemOpRWD PowerRWD CreatorFull SystemFull]
r18= 10,1,5,17 ; [WorldRWD AdminFull CreatorFull SystemFull]
;
; [Phase1RootKeys]
;
; [Phase2RootKeys]
;
; These sections list the root keys to be proccessed for
; security, on phase 1, and phase 2, respectivelly.
; These sections have the following format:
;
; [Phase1RootKeys]
; <Predefined key spec>, <Key path>, <DACL spec>, <Recurse flag>, <section name 1>, <section name 2>
;
; where:
;
; <Predef key spec>: A string associated with one of the predefined handles.
; It can be one of the following: HKLM for HKEY_LOCAL_MACHINE
; HKCR for HKEY_CLASSES_ROOT
; HKCU for HKEY_CURRENT_USER
; HKU for HKEY_USERS
; HKCC for HKEY_CURRENT_CONFIG
; This parameter is required.
;
;
; <Key path>: Path to a key to secure.
; The path is relative to a predefined key.
; If the key is a predefined key, then an empty string ""
; should be used as a key name.
; This parameter is required.
;
; <Recurse flag>: A flag that indicates if the DACL should be applied to
; the key and all its subkeys.
; It can be one of the following: 0... Apply to key only
; 1... Apply to key and subkeys
; If this parameter is not sopecified, or is invalid, '1' will
; be assumed.
;
; <DACL spec>: A string associated to the DACL to be applied to the key.
; It has to be one of the keys specified on [RegistryACL].
; This parameter is required.
;
; <section name 1>: This is an optional parameter.
; If present it indicates the section that contains the path
; to the subkeys (relative to <Key Path>) that should not be
; processed for security.
;
; The information in this section has the following format:
;
; [<section name 1>]
; <Key path 1>
; <Key path 2>
; .
; .
; .
;
; Where <Key path N> is relative to <Key path>
;
;
; <section name 2>: This is an optional parameter.
; If present it indicates the section that contains the path
; to the subkeys (relative to <Key Path>) that should get a
; DACL that is different than the one applied to <Key path>.
;
; The information in this section has the following format:
;
; [<section name 2>]
; <Key path 1> = <DACL spec 1>
; <Key path 2> = <DACL spec 2>
; .
; .
; .
;
; Where:
;
; <Key path N>: is a path to the key relative to <Key path>
;
; <Acl spec N>: A string associated to the DACL to be applied to the key.
; It has to be one of the keys specified on [RegistryDACLs].
; This parameter is required.
;
;
;
[Phase1RootKeys]
HKCU,"",1,r7,"HKCU.SKIP","HKCU.EXCEPTIONS" ; [AdminFull SystemFull WorldR]
;;;;;;;
;
; HKEY_CURRENT_USER (DEFAULT hive) sepcial keys
;
;;;;;;;
[HKCU.SKIP]
;
; Subkeys of HKEY_CURRENT_USER that should not
; have security descriptors applied to them.
;
[HKCU.EXCEPTIONS]
;
; Subkeys of HKEY_CLASSES_ROOT that should have a security
; descriptor applied to them and their subkeys, that is differnet than
; the one applied to their parent keys.
;
"Software\Microsoft\NetDDE" = r2 ; [SystemFull AdminFull]
"Software\Microsoft\Windows\CurrentVersion\Policies" = r12 ; [WorldR AdminFull SystemOpRWD PowerRWD SystemFull CreatorFull]
"Software\Policies" = r7 ; [WorldR AdminFull SystemFull]
[Phase2RootKeys]
HKLM,"SOFTWARE",1,r18,"HKLM.SOFTWARE.SKIP","HKLM.SOFTWARE.EXCEPTIONS" ; [WorldRWD AdminFull SystemFull CreatorFull]
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib",0,r4 ; [WorldR AdminFull CreatorFull SystemFull]
HKLM,"SYSTEM",1,r18,"HKLM.SYSTEM.SKIP","HKLM.SYSTEM.EXCEPTIONS" ; [WorldR AdminRWD SystemFull]
HKCR,"",1,r14,"HKCR.SKIP","HKCR.EXCEPTIONS" ; [WorldR InteractiveRWD AdminFull SystemFull CreatorFull]
;;;;;;;
;
; HKEY_LOCAL_MACHINE\SOFTWARE sepcial keys
;
;;;;;;;
[HKLM.SOFTWARE.SKIP]
;
; Subkeys of HKEY_LOCAL_MACHINE\SOFTWARE that should not have a security
; descriptor applied to them.
;
"SOFTWARE\Classes"
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib"
[HKLM.SOFTWARE.EXCEPTIONS]
;
; Subkeys of HKEY_LOCAL_MACHINE\SOFTWARE that should have a security
; descriptor applied to them and their subkeys, that is differnet than
; the one applied to their parent keys.
;
"SOFTWARE\Policies" = r7 ; [WorldR AdminFull SystemFull]
"SOFTWARE\Program Groups" = r9 ; [WorldR AdminFull SystemFull SystemOpRWD PowerRWD CreatorFull]
"SOFTWARE\Secure" = r10 ; [WorldR AdminFull SystemOpFull SystemFull CreatorFull]
"SOFTWARE\Microsoft" = r18 ; [WorldRWD AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Command Processor" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\NetDDE" = r2 ; [SystemFull AdminFull]
"SOFTWARE\Microsoft\Ole" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Rpc" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Rpc\ClientProtocols" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Rpc\NameService" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Rpc\NetBios" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Rpc\ServerProtocols" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Secure" = r10 ; [WorldR AdminFull SystemOpFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows" = r17 ; [WorldRW AdminFull SystemOpRWD PowerRWD SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce" = r5 ; [WorldR AdminFull SystemOpRWD SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions" = r12 ; [WorldR AdminFull SystemOpRWD PowerRWD SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony" = r6 ; [WorldR AdminFull SystemFull CreatorFull SystemOpRWD PowerRWD]
"SOFTWARE\Microsoft\Windows NT" = r12 ; [WorldR AdminFull SystemOpRWD PowerRWD SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion" = r12 ; [WorldR AdminFull SystemOpRWD PowerRWD SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\DiskQuota" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Embedding" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\File Manager" = r6 ; [WorldR AdminFull SystemFull CreatorFull SystemOpRWD PowerRWD]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Font Drivers" = r3 ; [WorldR AdminFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontCache" = r3 ; [WorldR AdminFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontMapper" = r3 ; [WorldR AdminFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\MCI" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\MCI Extensions" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Midimap" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network" = r6 ; [WorldR AdminFull SystemFull CreatorFull SystemOpRWD PowerRWD]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards" = r5 ; [WorldR AdminFull SystemOpRWD SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones" = r7 ; [WorldR AdminFull SystemFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Type 1 Installer\Type 1 Fonts" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" = r5 ; [WorldR AdminFull SystemOpRWD SystemFull CreatorFull]
"SOFTWARE\Microsoft\Windows NT\CurrentVersion\WOW" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
;;;;;;;
;
; HKEY_LOCAL_MACHINE\SYSTEM sepcial keys
;
;;;;;;;
[HKLM.SYSTEM.SKIP]
;
; Subkeys of HKEY_LOCAL_MACHINE\SYSTEM that should not have a security
; descriptor applied to them.
;
"SYSTEM\Clone"
"SYSTEM\ControlSet001"
"SYSTEM\ControlSet001"
"SYSTEM\ControlSet002"
"SYSTEM\ControlSet003"
"SYSTEM\ControlSet004"
"SYSTEM\ControlSet005"
"SYSTEM\ControlSet006"
"SYSTEM\ControlSet007"
"SYSTEM\ControlSet008"
"SYSTEM\ControlSet009"
"SYSTEM\ControlSet010"
[HKLM.SYSTEM.EXCEPTIONS]
;
; Subkeys of HKEY_LOCAL_MACHINE\SYSTEM that should have a security
; descriptor applied to them and their subkeys, that is differnet than
; the one applied to their parent keys.
;
"SYSTEM\CurrentControlSet" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Control" = r5 ; [SystemOpRWD WorldR AdminFull SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg" = r1 ; [AdminFull]
"SYSTEM\CurrentControlSet\Control\Session Manager\Executive" = r11 ; [WorldR AdminFull SystemOpRW PowerRW SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" = r7 ; [WorldR AdminFull SystemFull]
"SYSTEM\CurrentControlSet\Control\GraphicsDrivers" = r7 ; [WorldR AdminFull SystemFull]
"SYSTEM\CurrentControlSet\Control\Lsa" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Control\PriorityControl" = r16 ; [WorldRW AdminFull SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Control\ProductOptions" = r4 ; [WorldR SystemFull AdminFull CreatorFull]
"SYSTEM\CurrentControlSet\Control\TimeZoneInformation" = r11 ; [WorldR AdminFull SystemOpRW PowerRW SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Control\Windows" = r8 ; [WorldR AdminFull SystemFull SystemOpRW]
"SYSTEM\CurrentControlSet\Enum" = r15 ; [WorldR SystemFull]
"SYSTEM\CurrentControlSet\Hardware Profiles" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Hardware Profiles\0001" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Hardware Profiles\0001\Software" = r18 ; [WorldRWD AdminFull SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Hardware Profiles\0001\System" = r13 ; [WorldR AdminRWD SystemFull]
"SYSTEM\CurrentControlSet\Hardware Profiles\0001\System\CurrentControlSet" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Hardware Profiles\0001\System\CurrentControlSet\Control" = r5 ; [SystemOpRWD WorldR AdminFull SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Hardware Profiles\0001\System\CurrentControlSet\Enum" = r5 ; [SystemOpRWD WorldR AdminFull SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Hardware Profiles\0001\System\CurrentControlSet\Services" = r5 ; [SystemOpRWD WorldR AdminFull SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Services" = r5 ; [WorldR AdminFull SystemOpRWD SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Services\EventLog" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SYSTEM\CurrentControlSet\Services\WinTrust" = r7 ; [AdminFull SystemFull WorldR]
"SYSTEM\Select" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
"SYSTEM\Setup" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
;;;;;;;
;
; HKEY_CLASSES_ROOT sepcial keys
;
;;;;;;;
[HKCR.SKIP]
;
; Subkeys of HKEY_CLASSES_ROOT that should not
; have security descriptors applied to them.
;
[HKCR.EXCEPTIONS]
;
; Subkeys of HKEY_CLASSES_ROOT that should have security descriptors
; that are different than the ones applied to the parent key.
;
"helpfile" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
".hlp" = r4 ; [WorldR AdminFull SystemFull CreatorFull]
@*: [UpgradePhase1RootKeys]
@*: ; This section specifies the security descriptors to be applied to
@*: ; certain keys on the upgrade case.
@*: ; The format of each line in this section is the same as the format
@*: ; defined for [Phase1RootKeys] section
@*: ;
@*:
@*:
@*:
@*: ;;;;;;;
@*: ;
@*: ; HKEY_CURRENT_USER (DEFAULT hive) sepcial keys
@*: ;
@*: ;;;;;;;
@*:
@*: [UPGRADE.HKCU.SKIP]
@*: ;
@*: ; Subkeys of HKEY_CURRENT_USER that should not
@*: ; have security descriptors applied to them.
@*: ;
@*:
@*: [UPGRADE.HKCU.EXCEPTIONS]
@*: ;
@*: ; Subkeys of HKEY_CLASSES_ROOT that should have a security
@*: ; descriptor applied to them and their subkeys, that is differnet than
@*: ; the one applied to their parent keys.
@*: ;
@*:
@*:
@*:
@*: [UpgradePhase2RootKeys]
@*: ; This section specifies the security descriptors to be applied to
@*: ; certain keys on the upgrade case.
@*: ; The format of each line in this section is the same as the format
@*: ; defined for [Phase1RootKeys] section
@*: ;
@*:
@*:
@*: ;;;;;;;
@*: ;
@*: ; HKEY_LOCAL_MACHINE\SOFTWARE sepcial keys
@*: ;
@*: ;;;;;;;
@*:
@*: [UPGRADE.HKLM.SOFTWARE.SKIP]
@*: ;
@*: ; Subkeys of HKEY_LOCAL_MACHINE\SOFTWARE that should not have a security
@*: ; descriptor applied to them.
@*: ;
@*:
@*:
@*: [UPGRADE.HKLM.SOFTWARE.EXCEPTIONS]
@*: ;
@*: ; Subkeys of HKEY_LOCAL_MACHINE\SOFTWARE that should have a security
@*: ; descriptor applied to them and their subkeys, that is differnet than
@*: ; the one applied to their parent keys.
@*: ;
@*:
@*: ;;;;;;;
@*: ;
@*: ; HKEY_LOCAL_MACHINE\SYSTEM sepcial keys
@*: ;
@*: ;;;;;;;
@*:
@*: [UPGRADE.HKLM.SYSTEM.SKIP]
@*: ;
@*: ; Subkeys of HKEY_LOCAL_MACHINE\SYSTEM that should not have a security
@*: ; descriptor applied to them.
@*: ;
@*:
@*: [UPGRADE.HKLM.SYSTEM.EXCEPTIONS]
@*: ;
@*: ; Subkeys of HKEY_LOCAL_MACHINE\SYSTEM that should have a security
@*: ; descriptor applied to them and their subkeys, that is differnet than
@*: ; the one applied to their parent keys.
@*: ;
@*:
@*: ;;;;;;;
@*: ;
@*: ; HKEY_CLASSES_ROOT sepcial keys
@*: ;
@*: ;;;;;;;
@*:
@*: [UPGRADE.HKCR.SKIP]
@*: ;
@*: ; Subkeys of HKEY_CLASSES_ROOT that should not
@*: ; have security descriptors applied to them.
@*: ;
@*:
@*: [UPGRADE.HKCR.EXCEPTIONS]
@*: ;
@*: ; Subkeys of HKEY_CLASSES_ROOT that should have security descriptors
@*: ; that are different than the ones applied to the parent key.
@*: ;
@*:
@*:
Reference in a new issue Copy permalink