sid: define more constant authorities from MS-DTYP

1 files changed, 11 insertions, 5 deletions

diff --git a/sid.ml b/sid.ml
index ddfb8e1..ece361d 100644
--- a/sid.ml
+++ b/sid.ml
@@ -218,11 +218,17 @@ module WellKnown = struct
   let elite = create_unsafe [| U32.of_int 3 ; U32.of_int 3; U32.of_int 7 |] U64.one
 
   module Prefix = struct
-    let security_null_sid_authority    ?(sa=[||]) () = create ~sa (U64.of_int 0)
-    let security_world_sid_authority   ?(sa=[||]) () = create ~sa (U64.of_int 1)
-    let security_local_sid_authority   ?(sa=[||]) () = create ~sa (U64.of_int 2)
-    let security_creator_sid_authority ?(sa=[||]) () = create ~sa (U64.of_int 3)
-    let security_nt_authority          ?(sa=[||]) () = create ~sa (U64.of_int 5)
+    type toplevel_auth = ?sa:sub_auths -> unit -> sid
+
+    let security_null_sid_authority    ?(sa=[||]) () = create_unsafe sa (U64.of_int 0x00)
+    let security_world_sid_authority   ?(sa=[||]) () = create_unsafe sa (U64.of_int 0x01)
+    let security_local_sid_authority   ?(sa=[||]) () = create_unsafe sa (U64.of_int 0x02)
+    let security_creator_sid_authority ?(sa=[||]) () = create_unsafe sa (U64.of_int 0x03)
+    let security_nt_authority          ?(sa=[||]) () = create_unsafe sa (U64.of_int 0x05)
+    let security_app_package_authority      ?(sa=[||]) () = create_unsafe sa (U64.of_int 0x0f)
+    let security_mandatory_label_authority  ?(sa=[||]) () = create_unsafe sa (U64.of_int 0x10)
+    let security_scoped_policy_id_authority ?(sa=[||]) () = create_unsafe sa (U64.of_int 0x11)
+    let security_authentication_authority   ?(sa=[||]) () = create_unsafe sa (U64.of_int 0x12)
   end
 end