// ntifs.h

typedef struct _SYSTEM_RESOURCE_ATTRIBUTE_ACE {
  ACE_HEADER  Header;
  ACCESS_MASK Mask;
  ULONG       SidStart;
} SYSTEM_RESOURCE_ATTRIBUTE_ACE, *PSYSTEM_RESOURCE_ATTRIBUTE_ACE;
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (ns-ntifs-_system_resource_attribute_ace)

_SYSTEM_RESOURCE_ATTRIBUTE_ACE structure

Description

The SYSTEM_RESOURCE_ATTRIBUTE_ACE structure defines an access-control entry (ACE) for the system access-control list (ACL) specifying what rights a particular claim has to a resource. A resource attribute ACE causes an audit message to be logged when an attempt to gain access to resource based on a supported claim occurs.

Members

`Header`

Specifies an ACE_HEADER structure.

`Mask`

Specifies an ACCESS_MASK structure that specifies access rights for a claim to a resource.

`SidStart`

Specifies a SID. This is set to the Everyone, or S-1-1-0, SID.

Remarks

Following the SidStart member begins a CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1 structure which describes a supported claim.

SYSTEM_RESOURCE_ATTRIBUTE_ACE - NtDoc