diff --git a/winsup/w32api/ChangeLog b/winsup/w32api/ChangeLog
index 7c66c1a19..d4b4d4e47 100644
--- a/winsup/w32api/ChangeLog
+++ b/winsup/w32api/ChangeLog
@@ -1,3 +1,16 @@
+2008-04-22  Corinna Vinschen  <corinna@vinschen.de>
+
+	* include/winnt.h (SECURITY_MANDATORY_LABEL_AUTHORITY): Define.
+	(SECURITY_MANDATORY_UNTRUSTED_RID): Define.
+	(SECURITY_MANDATORY_LOW_RID): Define.
+	(SECURITY_MANDATORY_MEDIUM_RID): Define.
+	(SECURITY_MANDATORY_HIGH_RID): Define.
+	(SECURITY_MANDATORY_SYSTEM_RID): Define.
+	(SECURITY_MANDATORY_PROTECTED_PROCESS_RID): Define.
+	(SECURITY_MANDATORY_MAXIMUM_USER_RID): Define.
+	(SE_GROUP_INTEGRITY): Define.
+	(SE_GROUP_INTEGRITY_ENABLED): Define.
+
 2008-04-11  Corinna Vinschen  <corinna@vinschen.de>
 
 	* include/sddl.h (ConvertStringSidToSidA): Declare.
diff --git a/winsup/w32api/include/winnt.h b/winsup/w32api/include/winnt.h
index 60d8ca59c..fc6f3270a 100644
--- a/winsup/w32api/include/winnt.h
+++ b/winsup/w32api/include/winnt.h
@@ -436,6 +436,7 @@ typedef DWORD FLONG;
 #define SECURITY_CREATOR_SID_AUTHORITY	{0,0,0,0,0,3}
 #define SECURITY_NON_UNIQUE_AUTHORITY	{0,0,0,0,0,4}
 #define SECURITY_NT_AUTHORITY	{0,0,0,0,0,5}
+#define SECURITY_MANDATORY_LABEL_AUTHORITY	{0,0,0,0,0,16}
 #define SECURITY_NULL_RID	0
 #define SECURITY_WORLD_RID	(0x00000000L)
 #define SECURITY_LOCAL_RID	0
@@ -474,6 +475,13 @@ typedef DWORD FLONG;
 #define DOMAIN_ALIAS_RID_PRINT_OPS	0x226L
 #define DOMAIN_ALIAS_RID_BACKUP_OPS	0x227L
 #define DOMAIN_ALIAS_RID_REPLICATOR	0x228L
+#define SECURITY_MANDATORY_UNTRUSTED_RID	0
+#define SECURITY_MANDATORY_LOW_RID	0x1000
+#define SECURITY_MANDATORY_MEDIUM_RID	0x2000
+#define SECURITY_MANDATORY_HIGH_RID	0x3000
+#define SECURITY_MANDATORY_SYSTEM_RID	0x4000
+#define SECURITY_MANDATORY_PROTECTED_PROCESS_RID	0x5000
+#define SECURITY_MANDATORY_MAXIMUM_USER_RID SECURITY_MANDATORY_SYSTEM_RID
 #define SE_CREATE_TOKEN_NAME	TEXT("SeCreateTokenPrivilege")
 #define SE_ASSIGNPRIMARYTOKEN_NAME	TEXT("SeAssignPrimaryTokenPrivilege")
 #define SE_LOCK_MEMORY_NAME	TEXT("SeLockMemoryPrivilege")
@@ -514,6 +522,8 @@ typedef DWORD FLONG;
 #define SE_GROUP_ENABLED 4
 #define SE_GROUP_OWNER 8
 #define SE_GROUP_USE_FOR_DENY_ONLY 16
+#define SE_GROUP_INTEGRITY 32
+#define SE_GROUP_INTEGRITY_ENABLED 64
 #define SE_GROUP_LOGON_ID 3221225472U
 #define SE_GROUP_RESOURCE 536870912
 #define LANG_NEUTRAL	0x00