[PATCH v4 2/9] Add SeLockMemoryPrivilege to the list of admin privileges.

[Vibhav Pant]

From: Vibhav Pant

---
 server/security.h | 1 +
 server/token.c    | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/server/security.h b/server/security.h
index 58ab1594eae..6cf14a44dfe 100644
--- a/server/security.h
+++ b/server/security.h
@@ -23,6 +23,7 @@

#include <sys/types.h>

+extern const struct luid SeLockMemoryPrivilege;
 extern const struct luid SeIncreaseQuotaPrivilege;
 extern const struct luid SeSecurityPrivilege;
 extern const struct luid SeTakeOwnershipPrivilege;
diff --git a/server/token.c b/server/token.c
index 4df8d2e0c6e..3260c516956 100644
--- a/server/token.c
+++ b/server/token.c
@@ -42,6 +42,7 @@

#define MAX_SUBAUTH_COUNT 1

+const struct luid SeLockMemoryPrivilege           = {  4,  0};
 const struct luid SeIncreaseQuotaPrivilege        = {  5, 0 };
 const struct luid SeTcbPrivilege                  = {  7, 0 };
 const struct luid SeSecurityPrivilege             = {  8, 0 };
@@ -756,6 +757,7 @@ struct token *token_create_admin( unsigned primary, int impersonation_level, int
         { SeManageVolumePrivilege, 0 },
         { SeImpersonatePrivilege, SE_PRIVILEGE_ENABLED },
         { SeCreateGlobalPrivilege, SE_PRIVILEGE_ENABLED },
+        { SeLockMemoryPrivilege, SE_PRIVILEGE_ENABLED },
     };
     /* note: we don't include non-builtin groups here for the user -
      * telling us these is the job of a client-side program */