replace ad hoc driver loading with a proper driver manager, new DDK, new PnP manager with device matching, asynchronous startup, resource ownership and removal, add shared PCI capability helpers, replace typed, rigid services with a proper service manager, implement proper system shutdown and restart, shutting down unloads drivers and shuts down services, add simple power button, remove heavyweight boot self-tests and SMP stress runs, add monotonic timestamps to kernel debug output, fruitless USB and PS/2 fixes, make test builds opt in.

code/user/personalities/posix/posix_proc.c

@@ -247,8 +247,7 @@ static KSTATUS PosixProcessDeriveSecurityContext(SYS_HANDLE* contextOut) {
     info.Size = sizeof(info);
     KSTATUS status = SysQuerySecurityContext(SYS_SECURITY_CONTEXT_CURRENT, &info);
     if (!KSUCCESS(status)) return status;
-    if ((info.EffectivePrivileges & ~info.DelegablePrivileges) != 0 ||
-        (info.ServiceClaims & ~info.DelegableServiceClaims) != 0)
+    if ((info.EffectivePrivileges & ~info.DelegablePrivileges) != 0)
         return NTLSTATUS_ACCESS_DENIED;
 
     SYS_DERIVE_SECURITY_CONTEXT_REQUEST derive;
@@ -257,8 +256,6 @@ static KSTATUS PosixProcessDeriveSecurityContext(SYS_HANDLE* contextOut) {
     derive.SourceContext = SYS_SECURITY_CONTEXT_CURRENT;
     derive.EffectivePrivileges = info.EffectivePrivileges;
     derive.DelegablePrivileges = info.DelegablePrivileges;
-    derive.ServiceClaims = info.ServiceClaims;
-    derive.DelegableServiceClaims = info.DelegableServiceClaims;
     derive.Flags = SYS_SECURITY_CONTEXT_FLAG_NONE;
     derive.ContextHandleOut = contextOut;
     return SysDeriveSecurityContext(&derive);