The privilege token contains privilege information for an object or a subject. The fields are:
A token ID
The type of privilege
The privilege set
where type is one of the following:
Value |
Type |
---|---|
0 |
Unknown or Undefined |
1 |
Forced |
2 |
Allowed |
3 |
Effective |
4 |
Inheritable |
5 |
Permitted |
6 |
Saved |
The following figure shows the token format.
A privilege token is displayed by praudit as follows:
privilege,1,proc_tcb_audit