summaryrefslogtreecommitdiffstats
path: root/src/VBox/HostDrivers/Support/win/SUPHardenedVerify-win.h
diff options
context:
space:
mode:
Diffstat (limited to 'src/VBox/HostDrivers/Support/win/SUPHardenedVerify-win.h')
-rw-r--r--src/VBox/HostDrivers/Support/win/SUPHardenedVerify-win.h5
1 files changed, 3 insertions, 2 deletions
diff --git a/src/VBox/HostDrivers/Support/win/SUPHardenedVerify-win.h b/src/VBox/HostDrivers/Support/win/SUPHardenedVerify-win.h
index 0f953e38..a14ee4a7 100644
--- a/src/VBox/HostDrivers/Support/win/SUPHardenedVerify-win.h
+++ b/src/VBox/HostDrivers/Support/win/SUPHardenedVerify-win.h
@@ -151,8 +151,9 @@ DECLHIDDEN(int) supHardenedWinVerifyImageByLdrMod(RTLDRMOD hLdrMod, PCRTUTF16 p
# define SUPHNTVI_F_REQUIRE_SIGNATURE_ENFORCEMENT RT_BIT(2)
/** Whether to allow image verification by catalog file. */
# define SUPHNTVI_F_ALLOW_CAT_FILE_VERIFICATION RT_BIT(3)
-/** The file owner must be TrustedInstaller on Vista+. */
-# define SUPHNTVI_F_TRUSTED_INSTALLER_OWNER RT_BIT(4)
+/** The file owner must be TrustedInstaller, Builtin\\Administrators
+ * (S-1-5-32-544) or local system (S-1-5-21) on Vista+. */
+# define SUPHNTVI_F_TRUSTED_INSTALLER_OR_SIMILAR_OWNER RT_BIT(4)
/** Ignore the image architecture (otherwise it must match the verification
* code). Used with resource images and such. */
# define SUPHNTVI_F_IGNORE_ARCHITECTURE RT_BIT(30)