Share via

2.4.4.13.1 SYSTEM_MANDATORY_LABEL_ACE--RPC Representation

  • Article

msdn link

The RPC representation of the SYSTEM_MANDATORY_LABEL_ACE type defines an access control entry (ACE) for the system access control list (SACL) that specifies the mandatory access level and policy for a securable object.

 typedef struct _SYSTEM_MANDATORY_LABEL_ACE {
   ACE_HEADER Header;
   ACCESS_MASK Mask;
   DWORD SidStart;
 } SYSTEM_MANDATORY_LABEL_ACE,
  *PSYSTEM_MANDATORY_LABEL_ACE;

Header: An ACE_HEADER structure, as specified in section 2.4.4.13.

Mask: An ACCESS_MASK as specified in section 2.4.4.13.

SidStart: Specifies the first DWORD of the SID. The remaining bytes of the SID are stored in contiguous memory after the SidStart member. The IdentifierAuthority and RID MUST be as specified 2.4.4.13.