Use supported API to set CAPID in the SACL (#4496)

TravisEz13 · daxian-dbw · commit 7a03b0c7b98f · 2017-08-04T12:29:00.000-07:00
diff --git a/src/Microsoft.PowerShell.Security/security/AclCommands.cs b/src/Microsoft.PowerShell.Security/security/AclCommands.cs
@@ -1194,7 +1194,7 @@ private IntPtr GetSaclWithCapId(string capStr)
                 }
 
                 // Add CAPID to the SACL.
-                rs = NativeMethods.RtlAddScopedPolicyIDAce(
+                rs = NativeMethods.AddScopedPolicyIDAce(
                     pSacl,
                     NativeMethods.ACL_REVISION,
                     NativeMethods.SUB_CONTAINERS_AND_OBJECTS_INHERIT,
diff --git a/src/System.Management.Automation/security/nativeMethods.cs b/src/System.Management.Automation/security/nativeMethods.cs
@@ -1786,8 +1786,8 @@ internal static extern bool InitializeAcl(
             uint nAclLength,
             uint dwAclRevision);
 
-        [DllImport("ntdll.dll", CharSet = CharSet.Unicode)]
-        internal static extern uint RtlAddScopedPolicyIDAce(
+        [DllImport("api-ms-win-security-base-l1-2-0.dll", CharSet = CharSet.Unicode)]
+        internal static extern uint AddScopedPolicyIDAce(
             IntPtr Acl,
             uint AceRevision,
             uint AceFlags,

Original file line number	Diff line number	Diff line change
`@@ -1194,7 +1194,7 @@ private IntPtr GetSaclWithCapId(string capStr)`
`1194`	`1194`	`}`
`1195`	`1195`
`1196`	`1196`	`// Add CAPID to the SACL.`
`1197`		`- rs = NativeMethods.RtlAddScopedPolicyIDAce(`
	`1197`	`+ rs = NativeMethods.AddScopedPolicyIDAce(`
`1198`	`1198`	`pSacl,`
`1199`	`1199`	`NativeMethods.ACL_REVISION,`
`1200`	`1200`	`NativeMethods.SUB_CONTAINERS_AND_OBJECTS_INHERIT,`