1999-01-28 14:46:25 +01:00
|
|
|
/*
|
2002-03-10 00:29:33 +01:00
|
|
|
* Copyright 1999, 2000 Juergen Schmied <juergen.schmied@debitel.net>
|
2003-11-11 23:03:24 +01:00
|
|
|
* Copyright 2003 CodeWeavers Inc. (Ulrich Czekalla)
|
2006-08-12 14:00:34 +02:00
|
|
|
* Copyright 2006 Robert Reif
|
2002-03-10 00:29:33 +01:00
|
|
|
*
|
|
|
|
* This library is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
|
|
* License as published by the Free Software Foundation; either
|
|
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This library is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
|
* Lesser General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
|
|
* License along with this library; if not, write to the Free Software
|
2006-05-18 14:49:52 +02:00
|
|
|
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
|
2002-03-10 00:29:33 +01:00
|
|
|
*
|
1999-01-28 14:46:25 +01:00
|
|
|
*/
|
2002-03-10 00:29:33 +01:00
|
|
|
|
2003-09-06 01:08:26 +02:00
|
|
|
#include <stdarg.h>
|
1999-02-19 16:42:11 +01:00
|
|
|
#include <string.h>
|
|
|
|
|
2005-11-28 17:32:54 +01:00
|
|
|
#include "ntstatus.h"
|
|
|
|
#define WIN32_NO_STATUS
|
1999-03-14 17:35:05 +01:00
|
|
|
#include "windef.h"
|
2003-09-06 01:08:26 +02:00
|
|
|
#include "winbase.h"
|
1997-11-30 18:45:40 +01:00
|
|
|
#include "winerror.h"
|
2003-09-06 01:08:26 +02:00
|
|
|
#include "winreg.h"
|
2009-01-15 07:30:11 +01:00
|
|
|
#include "winsafer.h"
|
2002-09-13 00:07:02 +02:00
|
|
|
#include "winternl.h"
|
2005-06-24 13:54:15 +02:00
|
|
|
#include "winioctl.h"
|
2002-12-19 05:15:23 +01:00
|
|
|
#include "accctrl.h"
|
2003-11-11 23:03:24 +01:00
|
|
|
#include "sddl.h"
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
#include "winsvc.h"
|
2004-08-06 19:31:17 +02:00
|
|
|
#include "aclapi.h"
|
2007-09-23 06:26:05 +02:00
|
|
|
#include "objbase.h"
|
|
|
|
#include "iads.h"
|
2006-07-29 14:12:58 +02:00
|
|
|
#include "advapi32_misc.h"
|
2008-10-18 22:53:24 +02:00
|
|
|
#include "lmcons.h"
|
2004-08-06 19:31:17 +02:00
|
|
|
|
2002-03-10 00:29:33 +01:00
|
|
|
#include "wine/debug.h"
|
1997-02-15 15:29:56 +01:00
|
|
|
|
2002-03-10 00:29:33 +01:00
|
|
|
WINE_DEFAULT_DEBUG_CHANNEL(advapi);
|
1999-04-19 16:56:29 +02:00
|
|
|
|
2018-04-18 02:25:27 +02:00
|
|
|
static DWORD trustee_to_sid(DWORD nDestinationSidLength, PSID pDestinationSid, PTRUSTEEW pTrustee);
|
2003-11-11 23:03:24 +01:00
|
|
|
|
2006-07-29 02:21:49 +02:00
|
|
|
typedef struct _MAX_SID
|
2006-06-12 17:37:07 +02:00
|
|
|
{
|
2006-07-16 13:21:00 +02:00
|
|
|
/* same fields as struct _SID */
|
|
|
|
BYTE Revision;
|
|
|
|
BYTE SubAuthorityCount;
|
|
|
|
SID_IDENTIFIER_AUTHORITY IdentifierAuthority;
|
|
|
|
DWORD SubAuthority[SID_MAX_SUB_AUTHORITIES];
|
2006-07-29 02:21:49 +02:00
|
|
|
} MAX_SID;
|
|
|
|
|
2006-07-20 13:05:46 +02:00
|
|
|
typedef struct _AccountSid {
|
|
|
|
WELL_KNOWN_SID_TYPE type;
|
|
|
|
LPCWSTR account;
|
|
|
|
LPCWSTR domain;
|
|
|
|
SID_NAME_USE name_use;
|
2009-03-27 15:47:43 +01:00
|
|
|
LPCWSTR alias;
|
2006-07-20 13:05:46 +02:00
|
|
|
} AccountSid;
|
|
|
|
|
|
|
|
static const AccountSid ACCOUNT_SIDS[] = {
|
2020-09-10 15:20:10 +02:00
|
|
|
{ WinNullSid, L"NULL SID", L"", SidTypeWellKnownGroup },
|
|
|
|
{ WinWorldSid, L"Everyone", L"", SidTypeWellKnownGroup },
|
|
|
|
{ WinLocalSid, L"LOCAL", L"", SidTypeWellKnownGroup },
|
|
|
|
{ WinCreatorOwnerSid, L"CREATOR OWNER", L"", SidTypeWellKnownGroup },
|
|
|
|
{ WinCreatorGroupSid, L"CREATOR GROUP", L"", SidTypeWellKnownGroup },
|
|
|
|
{ WinCreatorOwnerServerSid, L"CREATOR OWNER SERVER", L"", SidTypeWellKnownGroup },
|
|
|
|
{ WinCreatorGroupServerSid, L"CREATOR GROUP SERVER", L"", SidTypeWellKnownGroup },
|
|
|
|
{ WinNtAuthoritySid, L"NT Pseudo Domain", L"NT Pseudo Domain", SidTypeDomain },
|
|
|
|
{ WinDialupSid, L"DIALUP", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinNetworkSid, L"NETWORK", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinBatchSid, L"BATCH", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinInteractiveSid, L"INTERACTIVE", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinServiceSid, L"SERVICE", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinAnonymousSid, L"ANONYMOUS LOGON", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinProxySid, L"PROXY", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinEnterpriseControllersSid, L"ENTERPRISE DOMAIN CONTROLLERS", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinSelfSid, L"SELF", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinAuthenticatedUserSid, L"Authenticated Users", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinRestrictedCodeSid, L"RESTRICTED", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinTerminalServerSid, L"TERMINAL SERVER USER", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinRemoteLogonIdSid, L"REMOTE INTERACTIVE LOGON", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinLocalSystemSid, L"SYSTEM", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinLocalServiceSid, L"LOCAL SERVICE", L"NT AUTHORITY", SidTypeWellKnownGroup, L"LOCALSERVICE" },
|
|
|
|
{ WinNetworkServiceSid, L"NETWORK SERVICE", L"NT AUTHORITY", SidTypeWellKnownGroup , L"NETWORKSERVICE"},
|
|
|
|
{ WinBuiltinDomainSid, L"BUILTIN", L"BUILTIN", SidTypeDomain },
|
|
|
|
{ WinBuiltinAdministratorsSid, L"Administrators", L"BUILTIN", SidTypeAlias },
|
|
|
|
{ WinBuiltinUsersSid, L"Users", L"BUILTIN", SidTypeAlias },
|
|
|
|
{ WinBuiltinGuestsSid, L"Guests", L"BUILTIN", SidTypeAlias },
|
|
|
|
{ WinBuiltinPowerUsersSid, L"Power Users", L"BUILTIN", SidTypeAlias },
|
|
|
|
{ WinBuiltinAccountOperatorsSid, L"Account Operators", L"BUILTIN", SidTypeAlias },
|
|
|
|
{ WinBuiltinSystemOperatorsSid, L"Server Operators", L"BUILTIN", SidTypeAlias },
|
|
|
|
{ WinBuiltinPrintOperatorsSid, L"Print Operators", L"BUILTIN", SidTypeAlias },
|
|
|
|
{ WinBuiltinBackupOperatorsSid, L"Backup Operators", L"BUILTIN", SidTypeAlias },
|
|
|
|
{ WinBuiltinReplicatorSid, L"Replicators", L"BUILTIN", SidTypeAlias },
|
|
|
|
{ WinBuiltinPreWindows2000CompatibleAccessSid, L"Pre-Windows 2000 Compatible Access", L"BUILTIN", SidTypeAlias },
|
|
|
|
{ WinBuiltinRemoteDesktopUsersSid, L"Remote Desktop Users", L"BUILTIN", SidTypeAlias },
|
|
|
|
{ WinBuiltinNetworkConfigurationOperatorsSid, L"Network Configuration Operators", L"BUILTIN", SidTypeAlias },
|
2021-06-09 19:46:03 +02:00
|
|
|
{ WinNTLMAuthenticationSid, L"NTLM Authentication", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
2020-09-10 15:20:10 +02:00
|
|
|
{ WinDigestAuthenticationSid, L"Digest Authentication", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinSChannelAuthenticationSid, L"SChannel Authentication", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinThisOrganizationSid, L"This Organization", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinOtherOrganizationSid, L"Other Organization", L"NT AUTHORITY", SidTypeWellKnownGroup },
|
|
|
|
{ WinBuiltinPerfMonitoringUsersSid, L"Performance Monitor Users", L"BUILTIN", SidTypeAlias },
|
|
|
|
{ WinBuiltinPerfLoggingUsersSid, L"Performance Log Users", L"BUILTIN", SidTypeAlias },
|
|
|
|
{ WinBuiltinAnyPackageSid, L"ALL APPLICATION PACKAGES", L"APPLICATION PACKAGE AUTHORITY", SidTypeWellKnownGroup },
|
2006-07-20 13:05:46 +02:00
|
|
|
};
|
2003-11-11 23:03:24 +01:00
|
|
|
|
2006-07-29 14:12:58 +02:00
|
|
|
const char * debugstr_sid(PSID sid)
|
2006-07-20 13:05:46 +02:00
|
|
|
{
|
|
|
|
int auth = 0;
|
2009-02-16 09:53:37 +01:00
|
|
|
SID * psid = sid;
|
2006-07-20 13:05:46 +02:00
|
|
|
|
|
|
|
if (psid == NULL)
|
|
|
|
return "(null)";
|
|
|
|
|
|
|
|
auth = psid->IdentifierAuthority.Value[5] +
|
|
|
|
(psid->IdentifierAuthority.Value[4] << 8) +
|
|
|
|
(psid->IdentifierAuthority.Value[3] << 16) +
|
|
|
|
(psid->IdentifierAuthority.Value[2] << 24);
|
|
|
|
|
|
|
|
switch (psid->SubAuthorityCount) {
|
|
|
|
case 0:
|
|
|
|
return wine_dbg_sprintf("S-%d-%d", psid->Revision, auth);
|
|
|
|
case 1:
|
2022-02-07 23:10:27 +01:00
|
|
|
return wine_dbg_sprintf("S-%d-%d-%lu", psid->Revision, auth,
|
2006-07-20 13:05:46 +02:00
|
|
|
psid->SubAuthority[0]);
|
|
|
|
case 2:
|
2022-02-07 23:10:27 +01:00
|
|
|
return wine_dbg_sprintf("S-%d-%d-%lu-%lu", psid->Revision, auth,
|
2006-07-20 13:05:46 +02:00
|
|
|
psid->SubAuthority[0], psid->SubAuthority[1]);
|
|
|
|
case 3:
|
2022-02-07 23:10:27 +01:00
|
|
|
return wine_dbg_sprintf("S-%d-%d-%lu-%lu-%lu", psid->Revision, auth,
|
2006-07-20 13:05:46 +02:00
|
|
|
psid->SubAuthority[0], psid->SubAuthority[1], psid->SubAuthority[2]);
|
|
|
|
case 4:
|
2022-02-07 23:10:27 +01:00
|
|
|
return wine_dbg_sprintf("S-%d-%d-%lu-%lu-%lu-%lu", psid->Revision, auth,
|
2006-07-20 13:05:46 +02:00
|
|
|
psid->SubAuthority[0], psid->SubAuthority[1], psid->SubAuthority[2],
|
|
|
|
psid->SubAuthority[3]);
|
|
|
|
case 5:
|
2022-02-07 23:10:27 +01:00
|
|
|
return wine_dbg_sprintf("S-%d-%d-%lu-%lu-%lu-%lu-%lu", psid->Revision, auth,
|
2006-07-20 13:05:46 +02:00
|
|
|
psid->SubAuthority[0], psid->SubAuthority[1], psid->SubAuthority[2],
|
|
|
|
psid->SubAuthority[3], psid->SubAuthority[4]);
|
|
|
|
case 6:
|
2022-02-07 23:10:27 +01:00
|
|
|
return wine_dbg_sprintf("S-%d-%d-%lu-%lu-%lu-%lu-%lu-%lu", psid->Revision, auth,
|
2006-07-20 13:05:46 +02:00
|
|
|
psid->SubAuthority[3], psid->SubAuthority[1], psid->SubAuthority[2],
|
|
|
|
psid->SubAuthority[0], psid->SubAuthority[4], psid->SubAuthority[5]);
|
|
|
|
case 7:
|
2022-02-07 23:10:27 +01:00
|
|
|
return wine_dbg_sprintf("S-%d-%d-%lu-%lu-%lu-%lu-%lu-%lu-%lu", psid->Revision, auth,
|
2006-07-20 13:05:46 +02:00
|
|
|
psid->SubAuthority[0], psid->SubAuthority[1], psid->SubAuthority[2],
|
|
|
|
psid->SubAuthority[3], psid->SubAuthority[4], psid->SubAuthority[5],
|
|
|
|
psid->SubAuthority[6]);
|
|
|
|
case 8:
|
2022-02-07 23:10:27 +01:00
|
|
|
return wine_dbg_sprintf("S-%d-%d-%lu-%lu-%lu-%lu-%lu-%lu-%lu-%lu", psid->Revision, auth,
|
2006-07-20 13:05:46 +02:00
|
|
|
psid->SubAuthority[0], psid->SubAuthority[1], psid->SubAuthority[2],
|
|
|
|
psid->SubAuthority[3], psid->SubAuthority[4], psid->SubAuthority[5],
|
|
|
|
psid->SubAuthority[6], psid->SubAuthority[7]);
|
|
|
|
}
|
|
|
|
return "(too-big)";
|
|
|
|
}
|
|
|
|
|
2013-01-18 18:59:01 +01:00
|
|
|
/* helper function for SE_FILE_OBJECT objects in [Get|Set]NamedSecurityInfo */
|
2015-03-27 11:11:31 +01:00
|
|
|
static inline DWORD get_security_file( LPCWSTR full_file_name, DWORD access, HANDLE *file )
|
2013-01-18 18:59:01 +01:00
|
|
|
{
|
|
|
|
UNICODE_STRING file_nameW;
|
|
|
|
OBJECT_ATTRIBUTES attr;
|
|
|
|
IO_STATUS_BLOCK io;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
if (!RtlDosPathNameToNtPathName_U( full_file_name, &file_nameW, NULL, NULL ))
|
|
|
|
return ERROR_PATH_NOT_FOUND;
|
|
|
|
attr.Length = sizeof(attr);
|
|
|
|
attr.RootDirectory = 0;
|
|
|
|
attr.Attributes = OBJ_CASE_INSENSITIVE;
|
|
|
|
attr.ObjectName = &file_nameW;
|
|
|
|
attr.SecurityDescriptor = NULL;
|
2015-10-30 12:53:59 +01:00
|
|
|
status = NtCreateFile( file, access|SYNCHRONIZE, &attr, &io, NULL, FILE_FLAG_BACKUP_SEMANTICS,
|
2013-01-18 18:59:01 +01:00
|
|
|
FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE, FILE_OPEN,
|
|
|
|
FILE_OPEN_FOR_BACKUP_INTENT, NULL, 0 );
|
|
|
|
RtlFreeUnicodeString( &file_nameW );
|
|
|
|
return RtlNtStatusToDosError( status );
|
|
|
|
}
|
|
|
|
|
2013-01-30 20:59:12 +01:00
|
|
|
/* helper function for SE_SERVICE objects in [Get|Set]NamedSecurityInfo */
|
|
|
|
static inline DWORD get_security_service( LPWSTR full_service_name, DWORD access, HANDLE *service )
|
|
|
|
{
|
2020-04-28 05:35:30 +02:00
|
|
|
SC_HANDLE manager = OpenSCManagerW( NULL, NULL, access );
|
|
|
|
if (manager)
|
2015-07-16 12:56:05 +02:00
|
|
|
{
|
2020-04-28 05:35:30 +02:00
|
|
|
*service = OpenServiceW( manager, full_service_name, access);
|
2015-07-16 12:56:05 +02:00
|
|
|
CloseServiceHandle( manager );
|
2020-04-28 05:35:30 +02:00
|
|
|
if (*service)
|
|
|
|
return ERROR_SUCCESS;
|
2015-07-16 12:56:05 +02:00
|
|
|
}
|
2020-04-28 05:35:30 +02:00
|
|
|
return GetLastError();
|
2013-01-30 20:59:12 +01:00
|
|
|
}
|
|
|
|
|
2013-02-02 16:52:04 +01:00
|
|
|
/* helper function for SE_REGISTRY_KEY objects in [Get|Set]NamedSecurityInfo */
|
|
|
|
static inline DWORD get_security_regkey( LPWSTR full_key_name, DWORD access, HANDLE *key )
|
|
|
|
{
|
2020-09-09 15:37:49 +02:00
|
|
|
LPWSTR p = wcschr(full_key_name, '\\');
|
2013-02-02 16:52:04 +01:00
|
|
|
int len = p-full_key_name;
|
|
|
|
HKEY hParent;
|
|
|
|
|
|
|
|
if (!p) return ERROR_INVALID_PARAMETER;
|
2020-09-10 15:20:10 +02:00
|
|
|
if (!wcsncmp( full_key_name, L"CLASSES_ROOT", len ))
|
2013-02-02 16:52:04 +01:00
|
|
|
hParent = HKEY_CLASSES_ROOT;
|
2020-09-10 15:20:10 +02:00
|
|
|
else if (!wcsncmp( full_key_name, L"CURRENT_USER", len ))
|
2013-02-02 16:52:04 +01:00
|
|
|
hParent = HKEY_CURRENT_USER;
|
2020-09-10 15:20:10 +02:00
|
|
|
else if (!wcsncmp( full_key_name, L"MACHINE", len ))
|
2013-02-02 16:52:04 +01:00
|
|
|
hParent = HKEY_LOCAL_MACHINE;
|
2020-09-10 15:20:10 +02:00
|
|
|
else if (!wcsncmp( full_key_name, L"USERS", len ))
|
2013-02-02 16:52:04 +01:00
|
|
|
hParent = HKEY_USERS;
|
|
|
|
else
|
|
|
|
return ERROR_INVALID_PARAMETER;
|
|
|
|
return RegOpenKeyExW( hParent, p+1, 0, access, (HKEY *)key );
|
|
|
|
}
|
|
|
|
|
2005-03-05 11:46:34 +01:00
|
|
|
|
2002-09-17 20:31:06 +02:00
|
|
|
/************************************************************
|
|
|
|
* ADVAPI_IsLocalComputer
|
|
|
|
*
|
|
|
|
* Checks whether the server name indicates local machine.
|
|
|
|
*/
|
2006-07-29 14:12:58 +02:00
|
|
|
BOOL ADVAPI_IsLocalComputer(LPCWSTR ServerName)
|
2002-09-17 20:31:06 +02:00
|
|
|
{
|
2005-06-09 11:44:44 +02:00
|
|
|
DWORD dwSize = MAX_COMPUTERNAME_LENGTH + 1;
|
|
|
|
BOOL Result;
|
|
|
|
LPWSTR buf;
|
|
|
|
|
|
|
|
if (!ServerName || !ServerName[0])
|
2004-11-04 05:52:17 +01:00
|
|
|
return TRUE;
|
2006-08-04 03:47:50 +02:00
|
|
|
|
2014-08-27 13:48:17 +02:00
|
|
|
buf = heap_alloc(dwSize * sizeof(WCHAR));
|
2005-06-09 11:44:44 +02:00
|
|
|
Result = GetComputerNameW(buf, &dwSize);
|
|
|
|
if (Result && (ServerName[0] == '\\') && (ServerName[1] == '\\'))
|
|
|
|
ServerName += 2;
|
2020-09-09 15:37:49 +02:00
|
|
|
Result = Result && !wcscmp(ServerName, buf);
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free(buf);
|
2005-06-09 11:44:44 +02:00
|
|
|
|
|
|
|
return Result;
|
2002-09-17 20:31:06 +02:00
|
|
|
}
|
|
|
|
|
2006-07-31 12:59:43 +02:00
|
|
|
/************************************************************
|
|
|
|
* ADVAPI_GetComputerSid
|
|
|
|
*/
|
|
|
|
BOOL ADVAPI_GetComputerSid(PSID sid)
|
|
|
|
{
|
2011-03-02 10:46:30 +01:00
|
|
|
static const struct /* same fields as struct SID */
|
2006-07-31 12:59:43 +02:00
|
|
|
{
|
2011-03-02 10:46:30 +01:00
|
|
|
BYTE Revision;
|
|
|
|
BYTE SubAuthorityCount;
|
|
|
|
SID_IDENTIFIER_AUTHORITY IdentifierAuthority;
|
|
|
|
DWORD SubAuthority[4];
|
|
|
|
} computer_sid =
|
|
|
|
{ SID_REVISION, 4, { SECURITY_NT_AUTHORITY }, { SECURITY_NT_NON_UNIQUE, 0, 0, 0 } };
|
|
|
|
|
|
|
|
memcpy( sid, &computer_sid, sizeof(computer_sid) );
|
|
|
|
return TRUE;
|
2006-07-31 12:59:43 +02:00
|
|
|
}
|
|
|
|
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
DWORD WINAPI
|
|
|
|
GetEffectiveRightsFromAclA( PACL pacl, PTRUSTEEA pTrustee, PACCESS_MASK pAccessRights )
|
|
|
|
{
|
|
|
|
FIXME("%p %p %p - stub\n", pacl, pTrustee, pAccessRights);
|
|
|
|
|
2009-12-01 11:35:50 +01:00
|
|
|
*pAccessRights = STANDARD_RIGHTS_ALL | SPECIFIC_RIGHTS_ALL;
|
|
|
|
return 0;
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
DWORD WINAPI
|
|
|
|
GetEffectiveRightsFromAclW( PACL pacl, PTRUSTEEW pTrustee, PACCESS_MASK pAccessRights )
|
|
|
|
{
|
|
|
|
FIXME("%p %p %p - stub\n", pacl, pTrustee, pAccessRights);
|
|
|
|
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
|
1999-02-19 17:29:05 +01:00
|
|
|
/* ##############################################
|
|
|
|
###### SECURITY DESCRIPTOR FUNCTIONS ######
|
|
|
|
##############################################
|
|
|
|
*/
|
2002-06-01 01:06:46 +02:00
|
|
|
|
2005-06-23 13:40:57 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* BuildSecurityDescriptorA [ADVAPI32.@]
|
|
|
|
*
|
|
|
|
* Builds a SD from
|
|
|
|
*
|
|
|
|
* PARAMS
|
|
|
|
* pOwner [I]
|
|
|
|
* pGroup [I]
|
|
|
|
* cCountOfAccessEntries [I]
|
|
|
|
* pListOfAccessEntries [I]
|
|
|
|
* cCountOfAuditEntries [I]
|
|
|
|
* pListofAuditEntries [I]
|
|
|
|
* pOldSD [I]
|
|
|
|
* lpdwBufferLength [I/O]
|
|
|
|
* pNewSD [O]
|
2005-11-12 20:12:03 +01:00
|
|
|
*
|
|
|
|
* RETURNS
|
|
|
|
* Success: ERROR_SUCCESS
|
|
|
|
* Failure: nonzero error code from Winerror.h
|
2005-06-23 13:40:57 +02:00
|
|
|
*/
|
|
|
|
DWORD WINAPI BuildSecurityDescriptorA(
|
2005-11-21 13:06:00 +01:00
|
|
|
IN PTRUSTEEA pOwner,
|
|
|
|
IN PTRUSTEEA pGroup,
|
|
|
|
IN ULONG cCountOfAccessEntries,
|
|
|
|
IN PEXPLICIT_ACCESSA pListOfAccessEntries,
|
|
|
|
IN ULONG cCountOfAuditEntries,
|
|
|
|
IN PEXPLICIT_ACCESSA pListofAuditEntries,
|
2005-06-23 13:40:57 +02:00
|
|
|
IN PSECURITY_DESCRIPTOR pOldSD,
|
2005-11-21 13:06:00 +01:00
|
|
|
IN OUT PULONG lpdwBufferLength,
|
|
|
|
OUT PSECURITY_DESCRIPTOR* pNewSD)
|
2005-06-23 13:40:57 +02:00
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("(%p,%p,%ld,%p,%ld,%p,%p,%p,%p) stub!\n",pOwner,pGroup,
|
2005-06-23 13:40:57 +02:00
|
|
|
cCountOfAccessEntries,pListOfAccessEntries,cCountOfAuditEntries,
|
|
|
|
pListofAuditEntries,pOldSD,lpdwBufferLength,pNewSD);
|
|
|
|
|
|
|
|
return ERROR_CALL_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* BuildSecurityDescriptorW [ADVAPI32.@]
|
|
|
|
*
|
|
|
|
* See BuildSecurityDescriptorA.
|
|
|
|
*/
|
|
|
|
DWORD WINAPI BuildSecurityDescriptorW(
|
2005-11-21 13:06:00 +01:00
|
|
|
IN PTRUSTEEW pOwner,
|
|
|
|
IN PTRUSTEEW pGroup,
|
|
|
|
IN ULONG cCountOfAccessEntries,
|
|
|
|
IN PEXPLICIT_ACCESSW pListOfAccessEntries,
|
|
|
|
IN ULONG cCountOfAuditEntries,
|
2018-04-18 02:25:27 +02:00
|
|
|
IN PEXPLICIT_ACCESSW pListOfAuditEntries,
|
2005-06-23 13:40:57 +02:00
|
|
|
IN PSECURITY_DESCRIPTOR pOldSD,
|
2005-11-21 13:06:00 +01:00
|
|
|
IN OUT PULONG lpdwBufferLength,
|
|
|
|
OUT PSECURITY_DESCRIPTOR* pNewSD)
|
2005-06-23 13:40:57 +02:00
|
|
|
{
|
2018-04-18 02:25:27 +02:00
|
|
|
SECURITY_DESCRIPTOR desc;
|
|
|
|
NTSTATUS status;
|
|
|
|
DWORD ret = ERROR_SUCCESS;
|
|
|
|
|
2022-02-07 23:10:27 +01:00
|
|
|
TRACE("(%p,%p,%ld,%p,%ld,%p,%p,%p,%p)\n", pOwner, pGroup,
|
2018-04-18 02:25:27 +02:00
|
|
|
cCountOfAccessEntries, pListOfAccessEntries, cCountOfAuditEntries,
|
|
|
|
pListOfAuditEntries, pOldSD, lpdwBufferLength, pNewSD);
|
2005-06-23 13:40:57 +02:00
|
|
|
|
2018-04-18 02:25:27 +02:00
|
|
|
if (pOldSD)
|
|
|
|
{
|
|
|
|
SECURITY_DESCRIPTOR_CONTROL control;
|
|
|
|
DWORD desc_size, dacl_size = 0, sacl_size = 0, owner_size = 0, group_size = 0;
|
|
|
|
PACL dacl = NULL, sacl = NULL;
|
|
|
|
PSID owner = NULL, group = NULL;
|
|
|
|
DWORD revision;
|
|
|
|
|
|
|
|
if ((status = RtlGetControlSecurityDescriptor( pOldSD, &control, &revision )) != STATUS_SUCCESS)
|
|
|
|
return RtlNtStatusToDosError( status );
|
|
|
|
if (!(control & SE_SELF_RELATIVE))
|
|
|
|
return ERROR_INVALID_SECURITY_DESCR;
|
|
|
|
|
|
|
|
desc_size = sizeof(desc);
|
|
|
|
status = RtlSelfRelativeToAbsoluteSD( pOldSD, &desc, &desc_size, dacl, &dacl_size, sacl, &sacl_size,
|
|
|
|
owner, &owner_size, group, &group_size );
|
|
|
|
if (status == STATUS_BUFFER_TOO_SMALL)
|
|
|
|
{
|
|
|
|
if (dacl_size)
|
|
|
|
dacl = LocalAlloc( LMEM_FIXED, dacl_size );
|
|
|
|
if (sacl_size)
|
|
|
|
sacl = LocalAlloc( LMEM_FIXED, sacl_size );
|
|
|
|
if (owner_size)
|
|
|
|
owner = LocalAlloc( LMEM_FIXED, owner_size );
|
|
|
|
if (group_size)
|
|
|
|
group = LocalAlloc( LMEM_FIXED, group_size );
|
|
|
|
|
|
|
|
desc_size = sizeof(desc);
|
|
|
|
status = RtlSelfRelativeToAbsoluteSD( pOldSD, &desc, &desc_size, dacl, &dacl_size, sacl, &sacl_size,
|
|
|
|
owner, &owner_size, group, &group_size );
|
|
|
|
}
|
|
|
|
if (status != STATUS_SUCCESS)
|
|
|
|
{
|
|
|
|
LocalFree( dacl );
|
|
|
|
LocalFree( sacl );
|
|
|
|
LocalFree( owner );
|
|
|
|
LocalFree( group );
|
|
|
|
return RtlNtStatusToDosError( status );
|
|
|
|
}
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
if ((status = RtlCreateSecurityDescriptor( &desc, SECURITY_DESCRIPTOR_REVISION )) != STATUS_SUCCESS)
|
|
|
|
return RtlNtStatusToDosError( status );
|
|
|
|
}
|
|
|
|
|
|
|
|
if (pOwner)
|
|
|
|
{
|
|
|
|
LocalFree( desc.Owner );
|
|
|
|
desc.Owner = LocalAlloc( LMEM_FIXED, sizeof(MAX_SID) );
|
|
|
|
if ((ret = trustee_to_sid( sizeof(MAX_SID), desc.Owner, pOwner )))
|
|
|
|
goto done;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (pGroup)
|
|
|
|
{
|
|
|
|
LocalFree( desc.Group );
|
|
|
|
desc.Group = LocalAlloc( LMEM_FIXED, sizeof(MAX_SID) );
|
|
|
|
if ((ret = trustee_to_sid( sizeof(MAX_SID), desc.Group, pGroup )))
|
|
|
|
goto done;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (pListOfAccessEntries)
|
|
|
|
{
|
|
|
|
PACL new_dacl;
|
|
|
|
|
|
|
|
if ((ret = SetEntriesInAclW( cCountOfAccessEntries, pListOfAccessEntries, desc.Dacl, &new_dacl )))
|
|
|
|
goto done;
|
|
|
|
|
|
|
|
LocalFree( desc.Dacl );
|
|
|
|
desc.Dacl = new_dacl;
|
|
|
|
desc.Control |= SE_DACL_PRESENT;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (pListOfAuditEntries)
|
|
|
|
{
|
|
|
|
PACL new_sacl;
|
|
|
|
|
|
|
|
if ((ret = SetEntriesInAclW( cCountOfAuditEntries, pListOfAuditEntries, desc.Sacl, &new_sacl )))
|
|
|
|
goto done;
|
|
|
|
|
|
|
|
LocalFree( desc.Sacl );
|
|
|
|
desc.Sacl = new_sacl;
|
|
|
|
desc.Control |= SE_SACL_PRESENT;
|
|
|
|
}
|
|
|
|
|
|
|
|
*lpdwBufferLength = RtlLengthSecurityDescriptor( &desc );
|
|
|
|
*pNewSD = LocalAlloc( LMEM_FIXED, *lpdwBufferLength );
|
|
|
|
|
|
|
|
if ((status = RtlMakeSelfRelativeSD( &desc, *pNewSD, lpdwBufferLength )) != STATUS_SUCCESS)
|
|
|
|
{
|
|
|
|
ret = RtlNtStatusToDosError( status );
|
|
|
|
LocalFree( *pNewSD );
|
|
|
|
*pNewSD = NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
done:
|
|
|
|
/* free absolute descriptor */
|
|
|
|
LocalFree( desc.Owner );
|
|
|
|
LocalFree( desc.Group );
|
|
|
|
LocalFree( desc.Sacl );
|
|
|
|
LocalFree( desc.Dacl );
|
|
|
|
return ret;
|
2005-06-23 13:40:57 +02:00
|
|
|
}
|
|
|
|
|
2004-11-04 05:52:17 +01:00
|
|
|
static const WCHAR * const WellKnownPrivNames[SE_MAX_WELL_KNOWN_PRIVILEGE + 1] =
|
|
|
|
{
|
|
|
|
NULL,
|
|
|
|
NULL,
|
2020-09-10 15:20:10 +02:00
|
|
|
L"SeCreateTokenPrivilege",
|
|
|
|
L"SeAssignPrimaryTokenPrivilege",
|
|
|
|
L"SeLockMemoryPrivilege",
|
|
|
|
L"SeIncreaseQuotaPrivilege",
|
|
|
|
L"SeMachineAccountPrivilege",
|
|
|
|
L"SeTcbPrivilege",
|
|
|
|
L"SeSecurityPrivilege",
|
|
|
|
L"SeTakeOwnershipPrivilege",
|
|
|
|
L"SeLoadDriverPrivilege",
|
|
|
|
L"SeSystemProfilePrivilege",
|
|
|
|
L"SeSystemtimePrivilege",
|
|
|
|
L"SeProfileSingleProcessPrivilege",
|
|
|
|
L"SeIncreaseBasePriorityPrivilege",
|
|
|
|
L"SeCreatePagefilePrivilege",
|
|
|
|
L"SeCreatePermanentPrivilege",
|
|
|
|
L"SeBackupPrivilege",
|
|
|
|
L"SeRestorePrivilege",
|
|
|
|
L"SeShutdownPrivilege",
|
|
|
|
L"SeDebugPrivilege",
|
|
|
|
L"SeAuditPrivilege",
|
|
|
|
L"SeSystemEnvironmentPrivilege",
|
|
|
|
L"SeChangeNotifyPrivilege",
|
|
|
|
L"SeRemoteShutdownPrivilege",
|
|
|
|
L"SeUndockPrivilege",
|
|
|
|
L"SeSyncAgentPrivilege",
|
|
|
|
L"SeEnableDelegationPrivilege",
|
|
|
|
L"SeManageVolumePrivilege",
|
|
|
|
L"SeImpersonatePrivilege",
|
|
|
|
L"SeCreateGlobalPrivilege",
|
2003-07-24 02:01:16 +02:00
|
|
|
};
|
|
|
|
|
2017-11-02 21:56:19 +01:00
|
|
|
const WCHAR *get_wellknown_privilege_name(const LUID *luid)
|
|
|
|
{
|
|
|
|
if (luid->HighPart || luid->LowPart < SE_MIN_WELL_KNOWN_PRIVILEGE ||
|
|
|
|
luid->LowPart > SE_MAX_WELL_KNOWN_PRIVILEGE || !WellKnownPrivNames[luid->LowPart])
|
|
|
|
return NULL;
|
|
|
|
|
|
|
|
return WellKnownPrivNames[luid->LowPart];
|
|
|
|
}
|
|
|
|
|
1999-02-19 17:29:05 +01:00
|
|
|
/******************************************************************************
|
2001-02-15 00:11:17 +01:00
|
|
|
* LookupPrivilegeValueW [ADVAPI32.@]
|
1999-02-19 17:29:05 +01:00
|
|
|
*
|
2003-03-18 19:35:48 +01:00
|
|
|
* See LookupPrivilegeValueA.
|
1997-02-15 15:29:56 +01:00
|
|
|
*/
|
1999-02-26 12:11:13 +01:00
|
|
|
BOOL WINAPI
|
2002-12-17 00:48:04 +01:00
|
|
|
LookupPrivilegeValueW( LPCWSTR lpSystemName, LPCWSTR lpName, PLUID lpLuid )
|
1997-08-24 18:00:30 +02:00
|
|
|
{
|
2003-07-24 02:01:16 +02:00
|
|
|
UINT i;
|
|
|
|
|
|
|
|
TRACE("%s,%s,%p\n",debugstr_w(lpSystemName), debugstr_w(lpName), lpLuid);
|
|
|
|
|
2004-11-04 05:52:17 +01:00
|
|
|
if (!ADVAPI_IsLocalComputer(lpSystemName))
|
2003-07-24 02:01:16 +02:00
|
|
|
{
|
2004-11-04 05:52:17 +01:00
|
|
|
SetLastError(RPC_S_SERVER_UNAVAILABLE);
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
if (!lpName)
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_NO_SUCH_PRIVILEGE);
|
|
|
|
return FALSE;
|
|
|
|
}
|
2008-11-10 09:47:29 +01:00
|
|
|
for( i=SE_MIN_WELL_KNOWN_PRIVILEGE; i<=SE_MAX_WELL_KNOWN_PRIVILEGE; i++ )
|
2004-11-04 05:52:17 +01:00
|
|
|
{
|
|
|
|
if( !WellKnownPrivNames[i] )
|
2003-07-24 02:01:16 +02:00
|
|
|
continue;
|
2020-09-09 15:37:49 +02:00
|
|
|
if( wcsicmp( WellKnownPrivNames[i], lpName) )
|
2003-07-24 02:01:16 +02:00
|
|
|
continue;
|
|
|
|
lpLuid->LowPart = i;
|
|
|
|
lpLuid->HighPart = 0;
|
2022-02-07 23:10:27 +01:00
|
|
|
TRACE( "%s -> %08lx-%08lx\n",debugstr_w( lpSystemName ),
|
2003-07-24 02:01:16 +02:00
|
|
|
lpLuid->HighPart, lpLuid->LowPart );
|
|
|
|
return TRUE;
|
|
|
|
}
|
2004-11-04 05:52:17 +01:00
|
|
|
SetLastError(ERROR_NO_SUCH_PRIVILEGE);
|
2003-07-24 02:01:16 +02:00
|
|
|
return FALSE;
|
1997-02-15 15:29:56 +01:00
|
|
|
}
|
|
|
|
|
1999-01-28 14:46:25 +01:00
|
|
|
/******************************************************************************
|
2001-02-15 00:11:17 +01:00
|
|
|
* LookupPrivilegeValueA [ADVAPI32.@]
|
2003-03-18 19:35:48 +01:00
|
|
|
*
|
|
|
|
* Retrieves LUID used on a system to represent the privilege name.
|
|
|
|
*
|
|
|
|
* PARAMS
|
|
|
|
* lpSystemName [I] Name of the system
|
|
|
|
* lpName [I] Name of the privilege
|
2004-04-23 23:32:34 +02:00
|
|
|
* lpLuid [O] Destination for the resulting LUID
|
2003-03-18 19:35:48 +01:00
|
|
|
*
|
|
|
|
* RETURNS
|
2004-04-23 23:32:34 +02:00
|
|
|
* Success: TRUE. lpLuid contains the requested LUID.
|
2003-03-18 19:35:48 +01:00
|
|
|
* Failure: FALSE.
|
1997-02-15 15:29:56 +01:00
|
|
|
*/
|
1999-02-26 12:11:13 +01:00
|
|
|
BOOL WINAPI
|
2002-12-17 00:48:04 +01:00
|
|
|
LookupPrivilegeValueA( LPCSTR lpSystemName, LPCSTR lpName, PLUID lpLuid )
|
1997-08-24 18:00:30 +02:00
|
|
|
{
|
2003-01-21 00:23:12 +01:00
|
|
|
UNICODE_STRING lpSystemNameW;
|
|
|
|
UNICODE_STRING lpNameW;
|
- implementation of RtlReg* (read access), RtlEvent*, RtlSemaphore*,
NtAllocateLocallyUniqueId
- implementation or stubs for NtAccessCheck, NtSetSecurityObject,
RtlClearBits, RtlEqualPrefixSid, RtlFindClearBits,
RtlFormatCurrentUserKeyPath, RtlGetControlSecurityDescriptor,
RtlIdentifierAuthoritySid, RtlImpersonateSelf, RtlInitializeBitMap,
RtlInitializeGenericTable, RtlMakeSelfRelativeSD,
RtlPrefixUnicodeString, RtlSetBits, RtlUnicodeToMultiByteN,
RtlUpcaseUnicodeStringToOemString, RtlUpcaseUnicodeToOemN,
RtlValidSid, RtlxUnicodeStringToOemSize
- corrected most RtlString* functions, added documentation
- more fixes and partial implementations
2000-01-23 23:35:33 +01:00
|
|
|
BOOL ret;
|
|
|
|
|
2003-01-21 00:23:12 +01:00
|
|
|
RtlCreateUnicodeStringFromAsciiz(&lpSystemNameW, lpSystemName);
|
|
|
|
RtlCreateUnicodeStringFromAsciiz(&lpNameW,lpName);
|
|
|
|
ret = LookupPrivilegeValueW(lpSystemNameW.Buffer, lpNameW.Buffer, lpLuid);
|
|
|
|
RtlFreeUnicodeString(&lpNameW);
|
|
|
|
RtlFreeUnicodeString(&lpSystemNameW);
|
1999-02-19 17:29:05 +01:00
|
|
|
return ret;
|
1997-02-15 15:29:56 +01:00
|
|
|
}
|
|
|
|
|
Stub implementations for GetKernelObjectSecurity,
GetPrivateObjectSecurity, GetServiceKeyName{A,W},
ImpersonateNamedPipeClient, InitiateSystemShutdown{A,W},
IsTokenRestricted, LogonUser{A,W}, LookupAccountNameW,
LookupPrivilegeDisplayName{A,W}, MapGenericMask,
ObjectCloseAuditAlarm{A,W}, ObjectOpenAuditAlarm{A,W},
ObjectPrivilegeAuditAlarm{A,W}, PrivilegedServiceAuditAlarm{A,W},
QueryServiceLockStatus{A,W}, SetAclInformation,
SetPrivateObjectSecurity, SetSecurityDescriptorControl,
SetServiceBits, LsaSetInformationPolicy, LsaLookupNames,
LsaEnumerateTrustedDomains.
2005-01-03 18:12:51 +01:00
|
|
|
BOOL WINAPI LookupPrivilegeDisplayNameA( LPCSTR lpSystemName, LPCSTR lpName, LPSTR lpDisplayName,
|
|
|
|
LPDWORD cchDisplayName, LPDWORD lpLanguageId )
|
|
|
|
{
|
|
|
|
FIXME("%s %s %s %p %p - stub\n", debugstr_a(lpSystemName), debugstr_a(lpName),
|
|
|
|
debugstr_a(lpDisplayName), cchDisplayName, lpLanguageId);
|
|
|
|
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
|
|
|
|
BOOL WINAPI LookupPrivilegeDisplayNameW( LPCWSTR lpSystemName, LPCWSTR lpName, LPWSTR lpDisplayName,
|
|
|
|
LPDWORD cchDisplayName, LPDWORD lpLanguageId )
|
|
|
|
{
|
|
|
|
FIXME("%s %s %s %p %p - stub\n", debugstr_w(lpSystemName), debugstr_w(lpName),
|
|
|
|
debugstr_w(lpDisplayName), cchDisplayName, lpLanguageId);
|
|
|
|
|
|
|
|
return FALSE;
|
|
|
|
}
|
2003-07-24 02:01:16 +02:00
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* LookupPrivilegeNameA [ADVAPI32.@]
|
2004-11-04 05:52:17 +01:00
|
|
|
*
|
2005-11-04 12:43:27 +01:00
|
|
|
* See LookupPrivilegeNameW.
|
2003-07-24 02:01:16 +02:00
|
|
|
*/
|
|
|
|
BOOL WINAPI
|
2004-11-04 05:52:17 +01:00
|
|
|
LookupPrivilegeNameA( LPCSTR lpSystemName, PLUID lpLuid, LPSTR lpName,
|
|
|
|
LPDWORD cchName)
|
2003-07-24 02:01:16 +02:00
|
|
|
{
|
2004-11-04 05:52:17 +01:00
|
|
|
UNICODE_STRING lpSystemNameW;
|
|
|
|
BOOL ret;
|
|
|
|
DWORD wLen = 0;
|
|
|
|
|
|
|
|
TRACE("%s %p %p %p\n", debugstr_a(lpSystemName), lpLuid, lpName, cchName);
|
|
|
|
|
|
|
|
RtlCreateUnicodeStringFromAsciiz(&lpSystemNameW, lpSystemName);
|
|
|
|
ret = LookupPrivilegeNameW(lpSystemNameW.Buffer, lpLuid, NULL, &wLen);
|
|
|
|
if (!ret && GetLastError() == ERROR_INSUFFICIENT_BUFFER)
|
|
|
|
{
|
2014-08-27 13:48:17 +02:00
|
|
|
LPWSTR lpNameW = heap_alloc(wLen * sizeof(WCHAR));
|
2004-11-04 05:52:17 +01:00
|
|
|
|
|
|
|
ret = LookupPrivilegeNameW(lpSystemNameW.Buffer, lpLuid, lpNameW,
|
|
|
|
&wLen);
|
|
|
|
if (ret)
|
|
|
|
{
|
|
|
|
/* Windows crashes if cchName is NULL, so will I */
|
2007-09-21 22:17:23 +02:00
|
|
|
unsigned int len = WideCharToMultiByte(CP_ACP, 0, lpNameW, -1, lpName,
|
2004-11-04 05:52:17 +01:00
|
|
|
*cchName, NULL, NULL);
|
|
|
|
|
|
|
|
if (len == 0)
|
|
|
|
{
|
|
|
|
/* WideCharToMultiByte failed */
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
else if (len > *cchName)
|
|
|
|
{
|
|
|
|
*cchName = len;
|
|
|
|
SetLastError(ERROR_INSUFFICIENT_BUFFER);
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
/* WideCharToMultiByte succeeded, output length needs to be
|
|
|
|
* length not including NULL terminator
|
|
|
|
*/
|
|
|
|
*cchName = len - 1;
|
|
|
|
}
|
|
|
|
}
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free(lpNameW);
|
2004-11-04 05:52:17 +01:00
|
|
|
}
|
|
|
|
RtlFreeUnicodeString(&lpSystemNameW);
|
|
|
|
return ret;
|
2003-07-24 02:01:16 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* LookupPrivilegeNameW [ADVAPI32.@]
|
2004-11-04 05:52:17 +01:00
|
|
|
*
|
|
|
|
* Retrieves the privilege name referred to by the LUID lpLuid.
|
|
|
|
*
|
|
|
|
* PARAMS
|
|
|
|
* lpSystemName [I] Name of the system
|
|
|
|
* lpLuid [I] Privilege value
|
|
|
|
* lpName [O] Name of the privilege
|
|
|
|
* cchName [I/O] Number of characters in lpName.
|
|
|
|
*
|
|
|
|
* RETURNS
|
|
|
|
* Success: TRUE. lpName contains the name of the privilege whose value is
|
|
|
|
* *lpLuid.
|
|
|
|
* Failure: FALSE.
|
|
|
|
*
|
|
|
|
* REMARKS
|
|
|
|
* Only well-known privilege names (those defined in winnt.h) can be retrieved
|
|
|
|
* using this function.
|
|
|
|
* If the length of lpName is too small, on return *cchName will contain the
|
|
|
|
* number of WCHARs needed to contain the privilege, including the NULL
|
|
|
|
* terminator, and GetLastError will return ERROR_INSUFFICIENT_BUFFER.
|
|
|
|
* On success, *cchName will contain the number of characters stored in
|
|
|
|
* lpName, NOT including the NULL terminator.
|
2003-07-24 02:01:16 +02:00
|
|
|
*/
|
|
|
|
BOOL WINAPI
|
2004-11-04 05:52:17 +01:00
|
|
|
LookupPrivilegeNameW( LPCWSTR lpSystemName, PLUID lpLuid, LPWSTR lpName,
|
|
|
|
LPDWORD cchName)
|
2003-07-24 02:01:16 +02:00
|
|
|
{
|
2004-11-04 05:52:17 +01:00
|
|
|
size_t privNameLen;
|
|
|
|
|
|
|
|
TRACE("%s,%p,%p,%p\n",debugstr_w(lpSystemName), lpLuid, lpName, cchName);
|
|
|
|
|
|
|
|
if (!ADVAPI_IsLocalComputer(lpSystemName))
|
|
|
|
{
|
|
|
|
SetLastError(RPC_S_SERVER_UNAVAILABLE);
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
if (lpLuid->HighPart || (lpLuid->LowPart < SE_MIN_WELL_KNOWN_PRIVILEGE ||
|
|
|
|
lpLuid->LowPart > SE_MAX_WELL_KNOWN_PRIVILEGE))
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_NO_SUCH_PRIVILEGE);
|
|
|
|
return FALSE;
|
|
|
|
}
|
2020-09-09 15:37:49 +02:00
|
|
|
privNameLen = lstrlenW(WellKnownPrivNames[lpLuid->LowPart]);
|
2004-11-04 05:52:17 +01:00
|
|
|
/* Windows crashes if cchName is NULL, so will I */
|
|
|
|
if (*cchName <= privNameLen)
|
|
|
|
{
|
|
|
|
*cchName = privNameLen + 1;
|
|
|
|
SetLastError(ERROR_INSUFFICIENT_BUFFER);
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
2020-09-09 15:37:49 +02:00
|
|
|
lstrcpyW(lpName, WellKnownPrivNames[lpLuid->LowPart]);
|
2004-11-04 05:52:17 +01:00
|
|
|
*cchName = privNameLen;
|
|
|
|
return TRUE;
|
|
|
|
}
|
2003-07-24 02:01:16 +02:00
|
|
|
}
|
|
|
|
|
1999-01-28 14:46:25 +01:00
|
|
|
/******************************************************************************
|
2001-02-15 00:11:17 +01:00
|
|
|
* GetFileSecurityA [ADVAPI32.@]
|
1999-01-28 14:46:25 +01:00
|
|
|
*
|
2003-03-18 19:35:48 +01:00
|
|
|
* Obtains Specified information about the security of a file or directory.
|
|
|
|
*
|
|
|
|
* PARAMS
|
|
|
|
* lpFileName [I] Name of the file to get info for
|
|
|
|
* RequestedInformation [I] SE_ flags from "winnt.h"
|
|
|
|
* pSecurityDescriptor [O] Destination for security information
|
|
|
|
* nLength [I] Length of pSecurityDescriptor
|
|
|
|
* lpnLengthNeeded [O] Destination for length of returned security information
|
|
|
|
*
|
|
|
|
* RETURNS
|
|
|
|
* Success: TRUE. pSecurityDescriptor contains the requested information.
|
|
|
|
* Failure: FALSE. lpnLengthNeeded contains the required space to return the info.
|
|
|
|
*
|
|
|
|
* NOTES
|
|
|
|
* The information returned is constrained by the callers access rights and
|
|
|
|
* privileges.
|
1997-02-15 15:29:56 +01:00
|
|
|
*/
|
1999-02-26 12:11:13 +01:00
|
|
|
BOOL WINAPI
|
2002-06-01 01:06:46 +02:00
|
|
|
GetFileSecurityA( LPCSTR lpFileName,
|
1999-02-19 17:29:05 +01:00
|
|
|
SECURITY_INFORMATION RequestedInformation,
|
|
|
|
PSECURITY_DESCRIPTOR pSecurityDescriptor,
|
|
|
|
DWORD nLength, LPDWORD lpnLengthNeeded )
|
1997-08-24 18:00:30 +02:00
|
|
|
{
|
2004-08-17 01:18:23 +02:00
|
|
|
BOOL r;
|
2012-09-13 22:54:37 +02:00
|
|
|
LPWSTR name;
|
2004-08-17 01:18:23 +02:00
|
|
|
|
2020-04-28 05:35:31 +02:00
|
|
|
name = strdupAW(lpFileName);
|
2004-08-17 01:18:23 +02:00
|
|
|
r = GetFileSecurityW( name, RequestedInformation, pSecurityDescriptor,
|
|
|
|
nLength, lpnLengthNeeded );
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free( name );
|
2004-08-17 01:18:23 +02:00
|
|
|
|
|
|
|
return r;
|
1997-02-15 15:29:56 +01:00
|
|
|
}
|
|
|
|
|
1999-01-28 14:46:25 +01:00
|
|
|
/******************************************************************************
|
2001-02-15 00:11:17 +01:00
|
|
|
* LookupAccountSidA [ADVAPI32.@]
|
1997-11-30 18:45:40 +01:00
|
|
|
*/
|
1999-02-26 12:11:13 +01:00
|
|
|
BOOL WINAPI
|
- implementation of RtlReg* (read access), RtlEvent*, RtlSemaphore*,
NtAllocateLocallyUniqueId
- implementation or stubs for NtAccessCheck, NtSetSecurityObject,
RtlClearBits, RtlEqualPrefixSid, RtlFindClearBits,
RtlFormatCurrentUserKeyPath, RtlGetControlSecurityDescriptor,
RtlIdentifierAuthoritySid, RtlImpersonateSelf, RtlInitializeBitMap,
RtlInitializeGenericTable, RtlMakeSelfRelativeSD,
RtlPrefixUnicodeString, RtlSetBits, RtlUnicodeToMultiByteN,
RtlUpcaseUnicodeStringToOemString, RtlUpcaseUnicodeToOemN,
RtlValidSid, RtlxUnicodeStringToOemSize
- corrected most RtlString* functions, added documentation
- more fixes and partial implementations
2000-01-23 23:35:33 +01:00
|
|
|
LookupAccountSidA(
|
|
|
|
IN LPCSTR system,
|
|
|
|
IN PSID sid,
|
|
|
|
OUT LPSTR account,
|
|
|
|
IN OUT LPDWORD accountSize,
|
|
|
|
OUT LPSTR domain,
|
|
|
|
IN OUT LPDWORD domainSize,
|
|
|
|
OUT PSID_NAME_USE name_use )
|
|
|
|
{
|
2006-07-20 13:05:46 +02:00
|
|
|
DWORD len;
|
|
|
|
BOOL r;
|
2012-09-13 22:54:37 +02:00
|
|
|
LPWSTR systemW;
|
2006-07-20 13:05:46 +02:00
|
|
|
LPWSTR accountW = NULL;
|
|
|
|
LPWSTR domainW = NULL;
|
2006-08-19 15:16:05 +02:00
|
|
|
DWORD accountSizeW = *accountSize;
|
|
|
|
DWORD domainSizeW = *domainSize;
|
2006-07-20 13:05:46 +02:00
|
|
|
|
2020-04-28 05:35:31 +02:00
|
|
|
systemW = strdupAW(system);
|
2006-08-19 15:16:05 +02:00
|
|
|
if (account)
|
2014-08-27 13:48:17 +02:00
|
|
|
accountW = heap_alloc( accountSizeW * sizeof(WCHAR) );
|
2006-08-19 15:16:05 +02:00
|
|
|
if (domain)
|
2014-08-27 13:48:17 +02:00
|
|
|
domainW = heap_alloc( domainSizeW * sizeof(WCHAR) );
|
2006-07-20 13:05:46 +02:00
|
|
|
|
2006-08-19 15:16:05 +02:00
|
|
|
r = LookupAccountSidW( systemW, sid, accountW, &accountSizeW, domainW, &domainSizeW, name_use );
|
- implementation of RtlReg* (read access), RtlEvent*, RtlSemaphore*,
NtAllocateLocallyUniqueId
- implementation or stubs for NtAccessCheck, NtSetSecurityObject,
RtlClearBits, RtlEqualPrefixSid, RtlFindClearBits,
RtlFormatCurrentUserKeyPath, RtlGetControlSecurityDescriptor,
RtlIdentifierAuthoritySid, RtlImpersonateSelf, RtlInitializeBitMap,
RtlInitializeGenericTable, RtlMakeSelfRelativeSD,
RtlPrefixUnicodeString, RtlSetBits, RtlUnicodeToMultiByteN,
RtlUpcaseUnicodeStringToOemString, RtlUpcaseUnicodeToOemN,
RtlValidSid, RtlxUnicodeStringToOemSize
- corrected most RtlString* functions, added documentation
- more fixes and partial implementations
2000-01-23 23:35:33 +01:00
|
|
|
|
2006-07-20 13:05:46 +02:00
|
|
|
if (r) {
|
2006-08-19 15:16:05 +02:00
|
|
|
if (accountW && *accountSize) {
|
|
|
|
len = WideCharToMultiByte( CP_ACP, 0, accountW, -1, NULL, 0, NULL, NULL );
|
|
|
|
WideCharToMultiByte( CP_ACP, 0, accountW, -1, account, len, NULL, NULL );
|
|
|
|
*accountSize = len;
|
|
|
|
} else
|
2006-08-26 00:14:58 +02:00
|
|
|
*accountSize = accountSizeW + 1;
|
2006-08-19 15:16:05 +02:00
|
|
|
|
|
|
|
if (domainW && *domainSize) {
|
|
|
|
len = WideCharToMultiByte( CP_ACP, 0, domainW, -1, NULL, 0, NULL, NULL );
|
|
|
|
WideCharToMultiByte( CP_ACP, 0, domainW, -1, domain, len, NULL, NULL );
|
|
|
|
*domainSize = len;
|
|
|
|
} else
|
2006-08-26 00:14:58 +02:00
|
|
|
*domainSize = domainSizeW + 1;
|
2006-07-20 13:05:46 +02:00
|
|
|
}
|
2010-09-21 12:54:50 +02:00
|
|
|
else
|
|
|
|
{
|
|
|
|
*accountSize = accountSizeW + 1;
|
|
|
|
*domainSize = domainSizeW + 1;
|
|
|
|
}
|
- implementation of RtlReg* (read access), RtlEvent*, RtlSemaphore*,
NtAllocateLocallyUniqueId
- implementation or stubs for NtAccessCheck, NtSetSecurityObject,
RtlClearBits, RtlEqualPrefixSid, RtlFindClearBits,
RtlFormatCurrentUserKeyPath, RtlGetControlSecurityDescriptor,
RtlIdentifierAuthoritySid, RtlImpersonateSelf, RtlInitializeBitMap,
RtlInitializeGenericTable, RtlMakeSelfRelativeSD,
RtlPrefixUnicodeString, RtlSetBits, RtlUnicodeToMultiByteN,
RtlUpcaseUnicodeStringToOemString, RtlUpcaseUnicodeToOemN,
RtlValidSid, RtlxUnicodeStringToOemSize
- corrected most RtlString* functions, added documentation
- more fixes and partial implementations
2000-01-23 23:35:33 +01:00
|
|
|
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free( systemW );
|
|
|
|
heap_free( accountW );
|
|
|
|
heap_free( domainW );
|
2006-07-20 13:05:46 +02:00
|
|
|
|
|
|
|
return r;
|
1997-11-30 18:45:40 +01:00
|
|
|
}
|
|
|
|
|
2019-05-30 12:52:36 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* LookupAccountSidLocalA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI
|
|
|
|
LookupAccountSidLocalA(
|
|
|
|
PSID sid,
|
|
|
|
LPSTR account,
|
|
|
|
LPDWORD accountSize,
|
|
|
|
LPSTR domain,
|
|
|
|
LPDWORD domainSize,
|
|
|
|
PSID_NAME_USE name_use )
|
|
|
|
{
|
|
|
|
return LookupAccountSidA(NULL, sid, account, accountSize, domain, domainSize, name_use);
|
|
|
|
}
|
|
|
|
|
1999-01-28 14:46:25 +01:00
|
|
|
/******************************************************************************
|
2001-02-15 00:11:17 +01:00
|
|
|
* LookupAccountSidW [ADVAPI32.@]
|
1999-01-28 14:46:25 +01:00
|
|
|
*
|
|
|
|
* PARAMS
|
|
|
|
* system []
|
|
|
|
* sid []
|
|
|
|
* account []
|
|
|
|
* accountSize []
|
|
|
|
* domain []
|
|
|
|
* domainSize []
|
|
|
|
* name_use []
|
|
|
|
*/
|
2006-07-20 13:05:46 +02:00
|
|
|
|
1999-02-26 12:11:13 +01:00
|
|
|
BOOL WINAPI
|
- implementation of RtlReg* (read access), RtlEvent*, RtlSemaphore*,
NtAllocateLocallyUniqueId
- implementation or stubs for NtAccessCheck, NtSetSecurityObject,
RtlClearBits, RtlEqualPrefixSid, RtlFindClearBits,
RtlFormatCurrentUserKeyPath, RtlGetControlSecurityDescriptor,
RtlIdentifierAuthoritySid, RtlImpersonateSelf, RtlInitializeBitMap,
RtlInitializeGenericTable, RtlMakeSelfRelativeSD,
RtlPrefixUnicodeString, RtlSetBits, RtlUnicodeToMultiByteN,
RtlUpcaseUnicodeStringToOemString, RtlUpcaseUnicodeToOemN,
RtlValidSid, RtlxUnicodeStringToOemSize
- corrected most RtlString* functions, added documentation
- more fixes and partial implementations
2000-01-23 23:35:33 +01:00
|
|
|
LookupAccountSidW(
|
|
|
|
IN LPCWSTR system,
|
|
|
|
IN PSID sid,
|
|
|
|
OUT LPWSTR account,
|
|
|
|
IN OUT LPDWORD accountSize,
|
|
|
|
OUT LPWSTR domain,
|
|
|
|
IN OUT LPDWORD domainSize,
|
|
|
|
OUT PSID_NAME_USE name_use )
|
|
|
|
{
|
2007-09-21 22:17:23 +02:00
|
|
|
unsigned int i, j;
|
2006-07-31 13:09:21 +02:00
|
|
|
const WCHAR * ac = NULL;
|
|
|
|
const WCHAR * dm = NULL;
|
|
|
|
SID_NAME_USE use = 0;
|
|
|
|
LPWSTR computer_name = NULL;
|
2008-10-18 22:53:24 +02:00
|
|
|
LPWSTR account_name = NULL;
|
- implementation of RtlReg* (read access), RtlEvent*, RtlSemaphore*,
NtAllocateLocallyUniqueId
- implementation or stubs for NtAccessCheck, NtSetSecurityObject,
RtlClearBits, RtlEqualPrefixSid, RtlFindClearBits,
RtlFormatCurrentUserKeyPath, RtlGetControlSecurityDescriptor,
RtlIdentifierAuthoritySid, RtlImpersonateSelf, RtlInitializeBitMap,
RtlInitializeGenericTable, RtlMakeSelfRelativeSD,
RtlPrefixUnicodeString, RtlSetBits, RtlUnicodeToMultiByteN,
RtlUpcaseUnicodeStringToOemString, RtlUpcaseUnicodeToOemN,
RtlValidSid, RtlxUnicodeStringToOemSize
- corrected most RtlString* functions, added documentation
- more fixes and partial implementations
2000-01-23 23:35:33 +01:00
|
|
|
|
2022-02-07 23:10:27 +01:00
|
|
|
TRACE("(%s,sid=%s,%p,%p(%lu),%p,%p(%lu),%p)\n",
|
2006-07-20 13:05:46 +02:00
|
|
|
debugstr_w(system),debugstr_sid(sid),
|
|
|
|
account,accountSize,accountSize?*accountSize:0,
|
|
|
|
domain,domainSize,domainSize?*domainSize:0,
|
|
|
|
name_use);
|
- implementation of RtlReg* (read access), RtlEvent*, RtlSemaphore*,
NtAllocateLocallyUniqueId
- implementation or stubs for NtAccessCheck, NtSetSecurityObject,
RtlClearBits, RtlEqualPrefixSid, RtlFindClearBits,
RtlFormatCurrentUserKeyPath, RtlGetControlSecurityDescriptor,
RtlIdentifierAuthoritySid, RtlImpersonateSelf, RtlInitializeBitMap,
RtlInitializeGenericTable, RtlMakeSelfRelativeSD,
RtlPrefixUnicodeString, RtlSetBits, RtlUnicodeToMultiByteN,
RtlUpcaseUnicodeStringToOemString, RtlUpcaseUnicodeToOemN,
RtlValidSid, RtlxUnicodeStringToOemSize
- corrected most RtlString* functions, added documentation
- more fixes and partial implementations
2000-01-23 23:35:33 +01:00
|
|
|
|
2006-07-20 13:05:46 +02:00
|
|
|
if (!ADVAPI_IsLocalComputer(system)) {
|
|
|
|
FIXME("Only local computer supported!\n");
|
2008-10-18 23:09:14 +02:00
|
|
|
SetLastError(RPC_S_SERVER_UNAVAILABLE);
|
2006-07-20 13:05:46 +02:00
|
|
|
return FALSE;
|
|
|
|
}
|
2006-07-31 13:09:21 +02:00
|
|
|
|
|
|
|
/* check the well known SIDs first */
|
2015-08-26 08:44:45 +02:00
|
|
|
for (i = 0; i <= WinAccountProtectedUsersSid; i++) {
|
2006-07-20 13:05:46 +02:00
|
|
|
if (IsWellKnownSid(sid, i)) {
|
2018-03-19 20:22:30 +01:00
|
|
|
for (j = 0; j < ARRAY_SIZE(ACCOUNT_SIDS); j++) {
|
2006-07-20 13:05:46 +02:00
|
|
|
if (ACCOUNT_SIDS[j].type == i) {
|
|
|
|
ac = ACCOUNT_SIDS[j].account;
|
|
|
|
dm = ACCOUNT_SIDS[j].domain;
|
|
|
|
use = ACCOUNT_SIDS[j].name_use;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2006-07-31 13:09:21 +02:00
|
|
|
if (dm == NULL) {
|
|
|
|
MAX_SID local;
|
|
|
|
|
|
|
|
/* check for the local computer next */
|
|
|
|
if (ADVAPI_GetComputerSid(&local)) {
|
|
|
|
DWORD size = MAX_COMPUTERNAME_LENGTH + 1;
|
|
|
|
BOOL result;
|
|
|
|
|
2014-08-27 13:48:17 +02:00
|
|
|
computer_name = heap_alloc(size * sizeof(WCHAR));
|
2006-07-31 13:09:21 +02:00
|
|
|
result = GetComputerNameW(computer_name, &size);
|
|
|
|
|
|
|
|
if (result) {
|
|
|
|
if (EqualSid(sid, &local)) {
|
|
|
|
dm = computer_name;
|
2020-09-10 15:20:10 +02:00
|
|
|
ac = L"";
|
2006-07-31 13:09:21 +02:00
|
|
|
use = 3;
|
2006-08-12 14:00:34 +02:00
|
|
|
} else {
|
|
|
|
local.SubAuthorityCount++;
|
|
|
|
|
|
|
|
if (EqualPrefixSid(sid, &local)) {
|
|
|
|
dm = computer_name;
|
|
|
|
use = 1;
|
|
|
|
switch (((MAX_SID *)sid)->SubAuthority[4]) {
|
|
|
|
case DOMAIN_USER_RID_ADMIN:
|
2020-09-10 15:20:10 +02:00
|
|
|
ac = L"Administrator";
|
2006-08-12 14:00:34 +02:00
|
|
|
break;
|
|
|
|
case DOMAIN_USER_RID_GUEST:
|
2020-09-10 15:20:10 +02:00
|
|
|
ac = L"Guest";
|
2006-08-12 14:00:34 +02:00
|
|
|
break;
|
|
|
|
case DOMAIN_GROUP_RID_ADMINS:
|
2020-09-10 15:20:10 +02:00
|
|
|
ac = L"Domain Admins";
|
2006-08-12 14:00:34 +02:00
|
|
|
break;
|
2006-08-26 00:14:58 +02:00
|
|
|
case DOMAIN_GROUP_RID_USERS:
|
2020-09-10 15:20:10 +02:00
|
|
|
ac = L"None";
|
2020-02-01 19:10:57 +01:00
|
|
|
use = SidTypeGroup;
|
2006-08-12 14:00:34 +02:00
|
|
|
break;
|
|
|
|
case DOMAIN_GROUP_RID_GUESTS:
|
2020-09-10 15:20:10 +02:00
|
|
|
ac = L"Domain Guests";
|
2006-08-12 14:00:34 +02:00
|
|
|
break;
|
|
|
|
case DOMAIN_GROUP_RID_COMPUTERS:
|
2020-09-10 15:20:10 +02:00
|
|
|
ac = L"Domain Computers";
|
2006-08-12 14:00:34 +02:00
|
|
|
break;
|
|
|
|
case DOMAIN_GROUP_RID_CONTROLLERS:
|
2020-09-10 15:20:10 +02:00
|
|
|
ac = L"Domain Controllers";
|
2006-08-12 14:00:34 +02:00
|
|
|
break;
|
|
|
|
case DOMAIN_GROUP_RID_CERT_ADMINS:
|
2020-09-10 15:20:10 +02:00
|
|
|
ac = L"Cert Publishers";
|
2006-08-12 14:00:34 +02:00
|
|
|
break;
|
|
|
|
case DOMAIN_GROUP_RID_SCHEMA_ADMINS:
|
2020-09-10 15:20:10 +02:00
|
|
|
ac = L"Schema Admins";
|
2006-08-12 14:00:34 +02:00
|
|
|
break;
|
|
|
|
case DOMAIN_GROUP_RID_ENTERPRISE_ADMINS:
|
2020-09-10 15:20:10 +02:00
|
|
|
ac = L"Enterprise Admins";
|
2006-08-12 14:00:34 +02:00
|
|
|
break;
|
|
|
|
case DOMAIN_GROUP_RID_POLICY_ADMINS:
|
2020-09-10 15:20:10 +02:00
|
|
|
ac = L"Group Policy Creator Owners";
|
2006-08-12 14:00:34 +02:00
|
|
|
break;
|
|
|
|
case DOMAIN_ALIAS_RID_RAS_SERVERS:
|
2020-09-10 15:20:10 +02:00
|
|
|
ac = L"RAS and IAS Servers";
|
2008-10-18 22:53:24 +02:00
|
|
|
break;
|
|
|
|
case 1000: /* first user account */
|
|
|
|
size = UNLEN + 1;
|
2014-08-27 13:48:17 +02:00
|
|
|
account_name = heap_alloc(size * sizeof(WCHAR));
|
2008-10-18 22:53:24 +02:00
|
|
|
if (GetUserNameW(account_name, &size))
|
|
|
|
ac = account_name;
|
|
|
|
else
|
|
|
|
dm = NULL;
|
|
|
|
|
2006-08-12 14:00:34 +02:00
|
|
|
break;
|
|
|
|
default:
|
|
|
|
dm = NULL;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
2006-07-31 13:09:21 +02:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (dm) {
|
2008-07-21 23:12:04 +02:00
|
|
|
DWORD ac_len = lstrlenW(ac);
|
|
|
|
DWORD dm_len = lstrlenW(dm);
|
2006-08-19 15:16:05 +02:00
|
|
|
BOOL status = TRUE;
|
2008-07-21 23:12:04 +02:00
|
|
|
|
|
|
|
if (*accountSize > ac_len) {
|
2006-08-19 15:16:05 +02:00
|
|
|
if (account)
|
|
|
|
lstrcpyW(account, ac);
|
|
|
|
}
|
2008-07-21 23:12:04 +02:00
|
|
|
if (*domainSize > dm_len) {
|
2006-08-19 15:16:05 +02:00
|
|
|
if (domain)
|
|
|
|
lstrcpyW(domain, dm);
|
|
|
|
}
|
2010-09-21 12:54:50 +02:00
|
|
|
if ((*accountSize && *accountSize < ac_len) ||
|
|
|
|
(!account && !*accountSize && ac_len) ||
|
|
|
|
(*domainSize && *domainSize < dm_len) ||
|
|
|
|
(!domain && !*domainSize && dm_len))
|
|
|
|
{
|
2006-08-26 00:14:58 +02:00
|
|
|
SetLastError(ERROR_INSUFFICIENT_BUFFER);
|
2006-08-19 15:16:05 +02:00
|
|
|
status = FALSE;
|
|
|
|
}
|
2006-08-26 00:14:58 +02:00
|
|
|
if (*domainSize)
|
2008-07-21 23:12:04 +02:00
|
|
|
*domainSize = dm_len;
|
2006-08-26 00:14:58 +02:00
|
|
|
else
|
2008-07-21 23:12:04 +02:00
|
|
|
*domainSize = dm_len + 1;
|
2006-08-26 00:14:58 +02:00
|
|
|
if (*accountSize)
|
2008-07-21 23:12:04 +02:00
|
|
|
*accountSize = ac_len;
|
2006-08-26 00:14:58 +02:00
|
|
|
else
|
2008-07-21 23:12:04 +02:00
|
|
|
*accountSize = ac_len + 1;
|
2010-09-21 12:54:50 +02:00
|
|
|
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free(account_name);
|
|
|
|
heap_free(computer_name);
|
2010-09-21 12:54:50 +02:00
|
|
|
if (status) *name_use = use;
|
2006-08-19 15:16:05 +02:00
|
|
|
return status;
|
2006-07-31 13:09:21 +02:00
|
|
|
}
|
|
|
|
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free(account_name);
|
|
|
|
heap_free(computer_name);
|
2006-07-31 13:09:21 +02:00
|
|
|
SetLastError(ERROR_NONE_MAPPED);
|
|
|
|
return FALSE;
|
1997-11-30 18:45:40 +01:00
|
|
|
}
|
|
|
|
|
2019-05-30 12:52:36 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* LookupAccountSidLocalW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI
|
|
|
|
LookupAccountSidLocalW(
|
|
|
|
PSID sid,
|
|
|
|
LPWSTR account,
|
|
|
|
LPDWORD accountSize,
|
|
|
|
LPWSTR domain,
|
|
|
|
LPDWORD domainSize,
|
|
|
|
PSID_NAME_USE name_use )
|
|
|
|
{
|
|
|
|
return LookupAccountSidW(NULL, sid, account, accountSize, domain, domainSize, name_use);
|
|
|
|
}
|
|
|
|
|
1999-01-03 13:48:29 +01:00
|
|
|
/******************************************************************************
|
2001-02-15 00:11:17 +01:00
|
|
|
* SetFileSecurityA [ADVAPI32.@]
|
2005-11-04 12:43:27 +01:00
|
|
|
*
|
|
|
|
* See SetFileSecurityW.
|
1999-01-03 13:48:29 +01:00
|
|
|
*/
|
1999-02-26 12:11:13 +01:00
|
|
|
BOOL WINAPI SetFileSecurityA( LPCSTR lpFileName,
|
1999-01-03 13:48:29 +01:00
|
|
|
SECURITY_INFORMATION RequestedInformation,
|
1999-02-12 18:47:07 +01:00
|
|
|
PSECURITY_DESCRIPTOR pSecurityDescriptor)
|
1999-01-03 13:48:29 +01:00
|
|
|
{
|
2004-08-17 01:18:23 +02:00
|
|
|
BOOL r;
|
2012-09-13 22:54:37 +02:00
|
|
|
LPWSTR name;
|
2004-08-17 01:18:23 +02:00
|
|
|
|
2020-04-28 05:35:31 +02:00
|
|
|
name = strdupAW(lpFileName);
|
2004-08-17 01:18:23 +02:00
|
|
|
r = SetFileSecurityW( name, RequestedInformation, pSecurityDescriptor );
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free( name );
|
2004-08-17 01:18:23 +02:00
|
|
|
|
|
|
|
return r;
|
1999-01-03 13:48:29 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
2001-02-15 00:11:17 +01:00
|
|
|
* QueryWindows31FilesMigration [ADVAPI32.@]
|
1999-01-28 14:46:25 +01:00
|
|
|
*
|
|
|
|
* PARAMS
|
|
|
|
* x1 []
|
1999-01-03 13:48:29 +01:00
|
|
|
*/
|
1999-02-26 12:11:13 +01:00
|
|
|
BOOL WINAPI
|
1999-01-28 14:46:25 +01:00
|
|
|
QueryWindows31FilesMigration( DWORD x1 )
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("(%ld):stub\n",x1);
|
1999-01-03 13:48:29 +01:00
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
2001-02-15 00:11:17 +01:00
|
|
|
* SynchronizeWindows31FilesAndWindowsNTRegistry [ADVAPI32.@]
|
1999-01-28 14:46:25 +01:00
|
|
|
*
|
|
|
|
* PARAMS
|
|
|
|
* x1 []
|
|
|
|
* x2 []
|
|
|
|
* x3 []
|
|
|
|
* x4 []
|
|
|
|
*/
|
1999-02-26 12:11:13 +01:00
|
|
|
BOOL WINAPI
|
1999-01-28 14:46:25 +01:00
|
|
|
SynchronizeWindows31FilesAndWindowsNTRegistry( DWORD x1, DWORD x2, DWORD x3,
|
|
|
|
DWORD x4 )
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("(0x%08lx,0x%08lx,0x%08lx,0x%08lx):stub\n",x1,x2,x3,x4);
|
1999-01-03 13:48:29 +01:00
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
2001-02-15 00:11:17 +01:00
|
|
|
* NotifyBootConfigStatus [ADVAPI32.@]
|
1999-01-28 14:46:25 +01:00
|
|
|
*
|
|
|
|
* PARAMS
|
|
|
|
* x1 []
|
1999-01-03 13:48:29 +01:00
|
|
|
*/
|
1999-02-26 12:11:13 +01:00
|
|
|
BOOL WINAPI
|
2005-11-21 13:06:00 +01:00
|
|
|
NotifyBootConfigStatus( BOOL x1 )
|
1999-01-28 14:46:25 +01:00
|
|
|
{
|
2005-11-21 13:06:00 +01:00
|
|
|
FIXME("(0x%08d):stub\n",x1);
|
2014-01-29 22:25:44 +01:00
|
|
|
return TRUE;
|
1999-01-03 13:48:29 +01:00
|
|
|
}
|
1999-01-26 11:11:22 +01:00
|
|
|
|
2000-10-15 02:23:56 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* LookupAccountNameA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI
|
|
|
|
LookupAccountNameA(
|
|
|
|
IN LPCSTR system,
|
|
|
|
IN LPCSTR account,
|
|
|
|
OUT PSID sid,
|
|
|
|
OUT LPDWORD cbSid,
|
|
|
|
LPSTR ReferencedDomainName,
|
|
|
|
IN OUT LPDWORD cbReferencedDomainName,
|
|
|
|
OUT PSID_NAME_USE name_use )
|
2006-02-21 20:17:24 +01:00
|
|
|
{
|
|
|
|
BOOL ret;
|
|
|
|
UNICODE_STRING lpSystemW;
|
|
|
|
UNICODE_STRING lpAccountW;
|
|
|
|
LPWSTR lpReferencedDomainNameW = NULL;
|
|
|
|
|
|
|
|
RtlCreateUnicodeStringFromAsciiz(&lpSystemW, system);
|
|
|
|
RtlCreateUnicodeStringFromAsciiz(&lpAccountW, account);
|
|
|
|
|
|
|
|
if (ReferencedDomainName)
|
2014-08-27 13:48:17 +02:00
|
|
|
lpReferencedDomainNameW = heap_alloc(*cbReferencedDomainName * sizeof(WCHAR));
|
2006-02-21 20:17:24 +01:00
|
|
|
|
|
|
|
ret = LookupAccountNameW(lpSystemW.Buffer, lpAccountW.Buffer, sid, cbSid, lpReferencedDomainNameW,
|
|
|
|
cbReferencedDomainName, name_use);
|
|
|
|
|
|
|
|
if (ret && lpReferencedDomainNameW)
|
|
|
|
{
|
2008-10-18 21:46:35 +02:00
|
|
|
WideCharToMultiByte(CP_ACP, 0, lpReferencedDomainNameW, -1,
|
|
|
|
ReferencedDomainName, *cbReferencedDomainName+1, NULL, NULL);
|
2006-02-21 20:17:24 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
RtlFreeUnicodeString(&lpSystemW);
|
|
|
|
RtlFreeUnicodeString(&lpAccountW);
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free(lpReferencedDomainNameW);
|
2006-02-21 20:17:24 +01:00
|
|
|
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
2009-02-04 22:20:39 +01:00
|
|
|
/******************************************************************************
|
|
|
|
* lookup_user_account_name
|
|
|
|
*/
|
|
|
|
static BOOL lookup_user_account_name(PSID Sid, PDWORD cbSid, LPWSTR ReferencedDomainName,
|
|
|
|
LPDWORD cchReferencedDomainName, PSID_NAME_USE peUse )
|
|
|
|
{
|
2009-10-06 16:49:22 +02:00
|
|
|
char buffer[sizeof(TOKEN_USER) + sizeof(SID) + sizeof(DWORD)*SID_MAX_SUB_AUTHORITIES];
|
|
|
|
DWORD len = sizeof(buffer);
|
|
|
|
HANDLE token;
|
2009-02-04 22:20:39 +01:00
|
|
|
BOOL ret;
|
|
|
|
PSID pSid;
|
2010-12-10 12:53:25 +01:00
|
|
|
WCHAR domainName[MAX_COMPUTERNAME_LENGTH + 1];
|
2009-02-04 22:20:39 +01:00
|
|
|
DWORD nameLen;
|
|
|
|
|
2009-10-06 16:49:22 +02:00
|
|
|
if (!OpenThreadToken(GetCurrentThread(), TOKEN_READ, TRUE, &token))
|
2009-02-04 22:20:39 +01:00
|
|
|
{
|
2009-10-06 16:49:22 +02:00
|
|
|
if (GetLastError() != ERROR_NO_TOKEN) return FALSE;
|
|
|
|
if (!OpenProcessToken(GetCurrentProcess(), TOKEN_READ, &token)) return FALSE;
|
2009-02-04 22:20:39 +01:00
|
|
|
}
|
|
|
|
|
2009-10-06 16:49:22 +02:00
|
|
|
ret = GetTokenInformation(token, TokenUser, buffer, len, &len);
|
|
|
|
CloseHandle( token );
|
|
|
|
|
|
|
|
if (!ret) return FALSE;
|
|
|
|
|
|
|
|
pSid = ((TOKEN_USER *)buffer)->User.Sid;
|
|
|
|
|
2009-02-04 22:20:39 +01:00
|
|
|
if (Sid != NULL && (*cbSid >= GetLengthSid(pSid)))
|
|
|
|
CopySid(*cbSid, Sid, pSid);
|
|
|
|
if (*cbSid < GetLengthSid(pSid))
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_INSUFFICIENT_BUFFER);
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
*cbSid = GetLengthSid(pSid);
|
|
|
|
|
2010-12-10 12:53:25 +01:00
|
|
|
nameLen = MAX_COMPUTERNAME_LENGTH + 1;
|
|
|
|
if (!GetComputerNameW(domainName, &nameLen))
|
|
|
|
{
|
|
|
|
domainName[0] = 0;
|
|
|
|
nameLen = 0;
|
|
|
|
}
|
2009-02-04 22:20:39 +01:00
|
|
|
if (*cchReferencedDomainName <= nameLen || !ret)
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_INSUFFICIENT_BUFFER);
|
|
|
|
nameLen += 1;
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
else if (ReferencedDomainName)
|
2020-09-09 15:37:49 +02:00
|
|
|
lstrcpyW(ReferencedDomainName, domainName);
|
2009-02-04 22:20:39 +01:00
|
|
|
|
|
|
|
*cchReferencedDomainName = nameLen;
|
|
|
|
|
|
|
|
if (ret)
|
|
|
|
*peUse = SidTypeUser;
|
|
|
|
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* lookup_computer_account_name
|
|
|
|
*/
|
|
|
|
static BOOL lookup_computer_account_name(PSID Sid, PDWORD cbSid, LPWSTR ReferencedDomainName,
|
|
|
|
LPDWORD cchReferencedDomainName, PSID_NAME_USE peUse )
|
|
|
|
{
|
|
|
|
MAX_SID local;
|
|
|
|
BOOL ret;
|
2010-12-10 12:53:25 +01:00
|
|
|
WCHAR domainName[MAX_COMPUTERNAME_LENGTH + 1];
|
2009-02-04 22:20:39 +01:00
|
|
|
DWORD nameLen;
|
|
|
|
|
|
|
|
if ((ret = ADVAPI_GetComputerSid(&local)))
|
|
|
|
{
|
|
|
|
if (Sid != NULL && (*cbSid >= GetLengthSid(&local)))
|
|
|
|
CopySid(*cbSid, Sid, &local);
|
|
|
|
if (*cbSid < GetLengthSid(&local))
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_INSUFFICIENT_BUFFER);
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
*cbSid = GetLengthSid(&local);
|
|
|
|
}
|
|
|
|
|
2010-12-10 12:53:25 +01:00
|
|
|
nameLen = MAX_COMPUTERNAME_LENGTH + 1;
|
|
|
|
if (!GetComputerNameW(domainName, &nameLen))
|
|
|
|
{
|
|
|
|
domainName[0] = 0;
|
|
|
|
nameLen = 0;
|
|
|
|
}
|
2009-02-04 22:20:39 +01:00
|
|
|
if (*cchReferencedDomainName <= nameLen || !ret)
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_INSUFFICIENT_BUFFER);
|
|
|
|
nameLen += 1;
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
else if (ReferencedDomainName)
|
2020-09-09 15:37:49 +02:00
|
|
|
lstrcpyW(ReferencedDomainName, domainName);
|
2009-02-04 22:20:39 +01:00
|
|
|
|
|
|
|
*cchReferencedDomainName = nameLen;
|
|
|
|
|
|
|
|
if (ret)
|
|
|
|
*peUse = SidTypeDomain;
|
|
|
|
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
2009-08-06 11:12:51 +02:00
|
|
|
static void split_domain_account( const LSA_UNICODE_STRING *str, LSA_UNICODE_STRING *account,
|
|
|
|
LSA_UNICODE_STRING *domain )
|
2000-10-15 02:23:56 +02:00
|
|
|
{
|
2009-08-06 11:12:51 +02:00
|
|
|
WCHAR *p = str->Buffer + str->Length / sizeof(WCHAR) - 1;
|
2004-09-07 22:41:35 +02:00
|
|
|
|
2009-08-06 11:12:51 +02:00
|
|
|
while (p > str->Buffer && *p != '\\') p--;
|
2004-09-07 22:41:35 +02:00
|
|
|
|
2009-08-06 11:12:51 +02:00
|
|
|
if (*p == '\\')
|
2008-10-18 23:09:14 +02:00
|
|
|
{
|
2009-08-06 11:12:51 +02:00
|
|
|
domain->Buffer = str->Buffer;
|
|
|
|
domain->Length = (p - str->Buffer) * sizeof(WCHAR);
|
2008-10-18 23:09:14 +02:00
|
|
|
|
2009-08-06 11:12:51 +02:00
|
|
|
account->Buffer = p + 1;
|
|
|
|
account->Length = str->Length - ((p - str->Buffer + 1) * sizeof(WCHAR));
|
|
|
|
}
|
|
|
|
else
|
2008-10-18 22:40:21 +02:00
|
|
|
{
|
2009-08-06 11:12:51 +02:00
|
|
|
domain->Buffer = NULL;
|
|
|
|
domain->Length = 0;
|
|
|
|
|
|
|
|
account->Buffer = str->Buffer;
|
|
|
|
account->Length = str->Length;
|
2008-10-18 22:40:21 +02:00
|
|
|
}
|
2009-08-06 11:12:51 +02:00
|
|
|
}
|
2008-10-18 22:40:21 +02:00
|
|
|
|
2010-07-25 23:06:07 +02:00
|
|
|
static BOOL match_domain( ULONG idx, const LSA_UNICODE_STRING *domain )
|
2009-08-06 11:12:51 +02:00
|
|
|
{
|
2020-09-09 15:37:49 +02:00
|
|
|
ULONG len = lstrlenW( ACCOUNT_SIDS[idx].domain );
|
2009-08-06 11:12:51 +02:00
|
|
|
|
2020-09-09 15:37:49 +02:00
|
|
|
if (len == domain->Length / sizeof(WCHAR) && !wcsnicmp( domain->Buffer, ACCOUNT_SIDS[idx].domain, len ))
|
2009-08-06 11:12:51 +02:00
|
|
|
return TRUE;
|
|
|
|
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
|
2010-07-25 23:06:07 +02:00
|
|
|
static BOOL match_account( ULONG idx, const LSA_UNICODE_STRING *account )
|
2009-08-06 11:12:51 +02:00
|
|
|
{
|
2020-09-09 15:37:49 +02:00
|
|
|
ULONG len = lstrlenW( ACCOUNT_SIDS[idx].account );
|
2009-08-06 11:12:51 +02:00
|
|
|
|
2020-09-09 15:37:49 +02:00
|
|
|
if (len == account->Length / sizeof(WCHAR) && !wcsnicmp( account->Buffer, ACCOUNT_SIDS[idx].account, len ))
|
2009-08-06 11:12:51 +02:00
|
|
|
return TRUE;
|
|
|
|
|
|
|
|
if (ACCOUNT_SIDS[idx].alias)
|
2009-03-31 16:00:11 +02:00
|
|
|
{
|
2020-09-09 15:37:49 +02:00
|
|
|
len = lstrlenW( ACCOUNT_SIDS[idx].alias );
|
|
|
|
if (len == account->Length / sizeof(WCHAR) && !wcsnicmp( account->Buffer, ACCOUNT_SIDS[idx].alias, len ))
|
2009-08-06 11:12:51 +02:00
|
|
|
return TRUE;
|
2009-03-31 16:00:11 +02:00
|
|
|
}
|
2009-08-06 11:12:51 +02:00
|
|
|
return FALSE;
|
|
|
|
}
|
2008-10-18 23:09:14 +02:00
|
|
|
|
2009-08-06 11:12:51 +02:00
|
|
|
/*
|
|
|
|
* Helper function for LookupAccountNameW
|
|
|
|
*/
|
2010-07-26 22:54:20 +02:00
|
|
|
BOOL lookup_local_wellknown_name( const LSA_UNICODE_STRING *account_and_domain,
|
2009-08-06 11:12:51 +02:00
|
|
|
PSID Sid, LPDWORD cbSid,
|
|
|
|
LPWSTR ReferencedDomainName,
|
|
|
|
LPDWORD cchReferencedDomainName,
|
|
|
|
PSID_NAME_USE peUse, BOOL *handled )
|
|
|
|
{
|
|
|
|
PSID pSid;
|
|
|
|
LSA_UNICODE_STRING account, domain;
|
|
|
|
BOOL ret = TRUE;
|
|
|
|
ULONG i;
|
|
|
|
|
|
|
|
*handled = FALSE;
|
|
|
|
split_domain_account( account_and_domain, &account, &domain );
|
|
|
|
|
2018-03-19 20:22:30 +01:00
|
|
|
for (i = 0; i < ARRAY_SIZE(ACCOUNT_SIDS); i++)
|
2008-01-22 16:37:01 +01:00
|
|
|
{
|
2009-03-31 16:00:11 +02:00
|
|
|
/* check domain first */
|
2009-08-06 11:12:51 +02:00
|
|
|
if (domain.Buffer && !match_domain( i, &domain )) continue;
|
2009-03-31 16:00:11 +02:00
|
|
|
|
2009-08-06 11:12:51 +02:00
|
|
|
if (match_account( i, &account ))
|
2008-01-22 16:37:01 +01:00
|
|
|
{
|
2009-08-06 11:12:51 +02:00
|
|
|
DWORD len, sidLen = SECURITY_MAX_SID_SIZE;
|
2008-10-18 22:28:39 +02:00
|
|
|
|
2014-08-27 13:48:17 +02:00
|
|
|
if (!(pSid = heap_alloc( sidLen ))) return FALSE;
|
2008-10-18 22:28:39 +02:00
|
|
|
|
2009-08-06 11:12:51 +02:00
|
|
|
if ((ret = CreateWellKnownSid( ACCOUNT_SIDS[i].type, NULL, pSid, &sidLen )))
|
2008-10-18 22:28:39 +02:00
|
|
|
{
|
|
|
|
if (*cbSid < sidLen)
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_INSUFFICIENT_BUFFER);
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
else if (Sid)
|
|
|
|
{
|
|
|
|
CopySid(*cbSid, Sid, pSid);
|
|
|
|
}
|
|
|
|
*cbSid = sidLen;
|
|
|
|
}
|
2008-10-18 21:51:58 +02:00
|
|
|
|
2020-09-09 15:37:49 +02:00
|
|
|
len = lstrlenW( ACCOUNT_SIDS[i].domain );
|
2009-08-06 11:12:51 +02:00
|
|
|
if (*cchReferencedDomainName <= len || !ret)
|
2008-10-18 21:51:58 +02:00
|
|
|
{
|
|
|
|
SetLastError(ERROR_INSUFFICIENT_BUFFER);
|
2009-08-06 11:12:51 +02:00
|
|
|
len++;
|
2008-10-18 21:51:58 +02:00
|
|
|
ret = FALSE;
|
|
|
|
}
|
2009-02-09 08:52:42 +01:00
|
|
|
else if (ReferencedDomainName)
|
2008-10-18 21:51:58 +02:00
|
|
|
{
|
2020-09-09 15:37:49 +02:00
|
|
|
lstrcpyW( ReferencedDomainName, ACCOUNT_SIDS[i].domain );
|
2008-10-18 21:51:58 +02:00
|
|
|
}
|
|
|
|
|
2009-08-06 11:12:51 +02:00
|
|
|
*cchReferencedDomainName = len;
|
2008-10-18 21:51:58 +02:00
|
|
|
if (ret)
|
|
|
|
*peUse = ACCOUNT_SIDS[i].name_use;
|
|
|
|
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free(pSid);
|
2009-08-06 11:12:51 +02:00
|
|
|
*handled = TRUE;
|
2008-10-18 21:51:58 +02:00
|
|
|
return ret;
|
2008-01-22 16:37:01 +01:00
|
|
|
}
|
|
|
|
}
|
2009-08-06 11:12:51 +02:00
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
2010-07-26 22:54:20 +02:00
|
|
|
BOOL lookup_local_user_name( const LSA_UNICODE_STRING *account_and_domain,
|
2009-08-06 11:12:51 +02:00
|
|
|
PSID Sid, LPDWORD cbSid,
|
|
|
|
LPWSTR ReferencedDomainName,
|
|
|
|
LPDWORD cchReferencedDomainName,
|
|
|
|
PSID_NAME_USE peUse, BOOL *handled )
|
|
|
|
{
|
|
|
|
DWORD nameLen;
|
|
|
|
LPWSTR userName = NULL;
|
|
|
|
LSA_UNICODE_STRING account, domain;
|
|
|
|
BOOL ret = TRUE;
|
|
|
|
|
|
|
|
*handled = FALSE;
|
|
|
|
split_domain_account( account_and_domain, &account, &domain );
|
2008-01-22 16:37:01 +01:00
|
|
|
|
2008-10-18 23:09:14 +02:00
|
|
|
/* Let the current Unix user id masquerade as first Windows user account */
|
|
|
|
|
|
|
|
nameLen = UNLEN + 1;
|
2014-08-27 13:48:17 +02:00
|
|
|
if (!(userName = heap_alloc( nameLen * sizeof(WCHAR) ))) return FALSE;
|
2008-10-18 23:09:14 +02:00
|
|
|
|
2009-08-06 11:12:51 +02:00
|
|
|
if (domain.Buffer)
|
2009-05-18 21:47:36 +02:00
|
|
|
{
|
|
|
|
/* check to make sure this account is on this computer */
|
2009-08-06 11:12:51 +02:00
|
|
|
if (GetComputerNameW( userName, &nameLen ) &&
|
2020-09-09 15:37:49 +02:00
|
|
|
(domain.Length / sizeof(WCHAR) != nameLen || wcsncmp( domain.Buffer, userName, nameLen )))
|
2009-05-18 21:47:36 +02:00
|
|
|
{
|
|
|
|
SetLastError(ERROR_NONE_MAPPED);
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
2009-05-27 21:31:10 +02:00
|
|
|
nameLen = UNLEN + 1;
|
2009-05-18 21:47:36 +02:00
|
|
|
}
|
|
|
|
|
2009-08-06 11:12:51 +02:00
|
|
|
if (GetUserNameW( userName, &nameLen ) &&
|
2020-09-09 15:37:49 +02:00
|
|
|
account.Length / sizeof(WCHAR) == nameLen - 1 && !wcsncmp( account.Buffer, userName, nameLen - 1 ))
|
2009-08-06 11:12:51 +02:00
|
|
|
{
|
|
|
|
ret = lookup_user_account_name( Sid, cbSid, ReferencedDomainName, cchReferencedDomainName, peUse );
|
|
|
|
*handled = TRUE;
|
|
|
|
}
|
2009-02-04 22:20:39 +01:00
|
|
|
else
|
2008-10-18 23:09:14 +02:00
|
|
|
{
|
2009-02-04 22:20:39 +01:00
|
|
|
nameLen = UNLEN + 1;
|
2009-08-06 11:12:51 +02:00
|
|
|
if (GetComputerNameW( userName, &nameLen ) &&
|
2020-09-09 15:37:49 +02:00
|
|
|
account.Length / sizeof(WCHAR) == nameLen && !wcsncmp( account.Buffer, userName , nameLen ))
|
2009-02-04 22:20:39 +01:00
|
|
|
{
|
2009-08-06 11:12:51 +02:00
|
|
|
ret = lookup_computer_account_name( Sid, cbSid, ReferencedDomainName, cchReferencedDomainName, peUse );
|
|
|
|
*handled = TRUE;
|
2009-02-04 22:20:39 +01:00
|
|
|
}
|
2008-10-18 23:09:14 +02:00
|
|
|
}
|
|
|
|
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free(userName);
|
2004-09-07 22:41:35 +02:00
|
|
|
return ret;
|
2000-10-15 02:23:56 +02:00
|
|
|
}
|
2002-01-31 21:44:02 +01:00
|
|
|
|
2009-08-06 11:12:51 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* LookupAccountNameW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI LookupAccountNameW( LPCWSTR lpSystemName, LPCWSTR lpAccountName, PSID Sid,
|
|
|
|
LPDWORD cbSid, LPWSTR ReferencedDomainName,
|
|
|
|
LPDWORD cchReferencedDomainName, PSID_NAME_USE peUse )
|
|
|
|
{
|
|
|
|
BOOL ret, handled;
|
|
|
|
LSA_UNICODE_STRING account;
|
|
|
|
|
2010-12-10 12:53:25 +01:00
|
|
|
TRACE("%s %s %p %p %p %p %p\n", debugstr_w(lpSystemName), debugstr_w(lpAccountName),
|
2009-08-06 11:12:51 +02:00
|
|
|
Sid, cbSid, ReferencedDomainName, cchReferencedDomainName, peUse);
|
|
|
|
|
|
|
|
if (!ADVAPI_IsLocalComputer( lpSystemName ))
|
|
|
|
{
|
2010-12-10 12:53:25 +01:00
|
|
|
FIXME("remote computer not supported\n");
|
2009-08-06 11:12:51 +02:00
|
|
|
SetLastError( RPC_S_SERVER_UNAVAILABLE );
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
|
2020-09-10 15:20:10 +02:00
|
|
|
if (!lpAccountName || !wcscmp( lpAccountName, L"" ))
|
2009-08-06 11:12:51 +02:00
|
|
|
{
|
2020-09-10 15:20:10 +02:00
|
|
|
lpAccountName = L"BUILTIN";
|
2009-08-06 11:12:51 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
RtlInitUnicodeString( &account, lpAccountName );
|
|
|
|
|
|
|
|
/* Check well known SIDs first */
|
|
|
|
ret = lookup_local_wellknown_name( &account, Sid, cbSid, ReferencedDomainName,
|
|
|
|
cchReferencedDomainName, peUse, &handled );
|
|
|
|
if (handled)
|
|
|
|
return ret;
|
|
|
|
|
|
|
|
/* Check user names */
|
|
|
|
ret = lookup_local_user_name( &account, Sid, cbSid, ReferencedDomainName,
|
|
|
|
cchReferencedDomainName, peUse, &handled);
|
|
|
|
if (handled)
|
|
|
|
return ret;
|
|
|
|
|
|
|
|
SetLastError( ERROR_NONE_MAPPED );
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
|
2003-05-11 04:37:11 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* AccessCheckAndAuditAlarmA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI AccessCheckAndAuditAlarmA(LPCSTR Subsystem, LPVOID HandleId, LPSTR ObjectTypeName,
|
|
|
|
LPSTR ObjectName, PSECURITY_DESCRIPTOR SecurityDescriptor, DWORD DesiredAccess,
|
|
|
|
PGENERIC_MAPPING GenericMapping, BOOL ObjectCreation, LPDWORD GrantedAccess,
|
|
|
|
LPBOOL AccessStatus, LPBOOL pfGenerateOnClose)
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("stub (%s,%p,%s,%s,%p,%08lx,%p,%x,%p,%p,%p)\n", debugstr_a(Subsystem),
|
2003-05-11 04:37:11 +02:00
|
|
|
HandleId, debugstr_a(ObjectTypeName), debugstr_a(ObjectName),
|
|
|
|
SecurityDescriptor, DesiredAccess, GenericMapping,
|
|
|
|
ObjectCreation, GrantedAccess, AccessStatus, pfGenerateOnClose);
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
Stub implementations for GetKernelObjectSecurity,
GetPrivateObjectSecurity, GetServiceKeyName{A,W},
ImpersonateNamedPipeClient, InitiateSystemShutdown{A,W},
IsTokenRestricted, LogonUser{A,W}, LookupAccountNameW,
LookupPrivilegeDisplayName{A,W}, MapGenericMask,
ObjectCloseAuditAlarm{A,W}, ObjectOpenAuditAlarm{A,W},
ObjectPrivilegeAuditAlarm{A,W}, PrivilegedServiceAuditAlarm{A,W},
QueryServiceLockStatus{A,W}, SetAclInformation,
SetPrivateObjectSecurity, SetSecurityDescriptorControl,
SetServiceBits, LsaSetInformationPolicy, LsaLookupNames,
LsaEnumerateTrustedDomains.
2005-01-03 18:12:51 +01:00
|
|
|
BOOL WINAPI ObjectCloseAuditAlarmA(LPCSTR SubsystemName, LPVOID HandleId, BOOL GenerateOnClose)
|
|
|
|
{
|
|
|
|
FIXME("stub (%s,%p,%x)\n", debugstr_a(SubsystemName), HandleId, GenerateOnClose);
|
|
|
|
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
BOOL WINAPI ObjectOpenAuditAlarmA(LPCSTR SubsystemName, LPVOID HandleId, LPSTR ObjectTypeName,
|
|
|
|
LPSTR ObjectName, PSECURITY_DESCRIPTOR pSecurityDescriptor, HANDLE ClientToken, DWORD DesiredAccess,
|
|
|
|
DWORD GrantedAccess, PPRIVILEGE_SET Privileges, BOOL ObjectCreation, BOOL AccessGranted,
|
|
|
|
LPBOOL GenerateOnClose)
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("stub (%s,%p,%s,%s,%p,%p,0x%08lx,0x%08lx,%p,%x,%x,%p)\n", debugstr_a(SubsystemName),
|
Stub implementations for GetKernelObjectSecurity,
GetPrivateObjectSecurity, GetServiceKeyName{A,W},
ImpersonateNamedPipeClient, InitiateSystemShutdown{A,W},
IsTokenRestricted, LogonUser{A,W}, LookupAccountNameW,
LookupPrivilegeDisplayName{A,W}, MapGenericMask,
ObjectCloseAuditAlarm{A,W}, ObjectOpenAuditAlarm{A,W},
ObjectPrivilegeAuditAlarm{A,W}, PrivilegedServiceAuditAlarm{A,W},
QueryServiceLockStatus{A,W}, SetAclInformation,
SetPrivateObjectSecurity, SetSecurityDescriptorControl,
SetServiceBits, LsaSetInformationPolicy, LsaLookupNames,
LsaEnumerateTrustedDomains.
2005-01-03 18:12:51 +01:00
|
|
|
HandleId, debugstr_a(ObjectTypeName), debugstr_a(ObjectName), pSecurityDescriptor,
|
|
|
|
ClientToken, DesiredAccess, GrantedAccess, Privileges, ObjectCreation, AccessGranted,
|
|
|
|
GenerateOnClose);
|
|
|
|
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
BOOL WINAPI ObjectPrivilegeAuditAlarmA( LPCSTR SubsystemName, LPVOID HandleId, HANDLE ClientToken,
|
|
|
|
DWORD DesiredAccess, PPRIVILEGE_SET Privileges, BOOL AccessGranted)
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("stub (%s,%p,%p,0x%08lx,%p,%x)\n", debugstr_a(SubsystemName), HandleId, ClientToken,
|
Stub implementations for GetKernelObjectSecurity,
GetPrivateObjectSecurity, GetServiceKeyName{A,W},
ImpersonateNamedPipeClient, InitiateSystemShutdown{A,W},
IsTokenRestricted, LogonUser{A,W}, LookupAccountNameW,
LookupPrivilegeDisplayName{A,W}, MapGenericMask,
ObjectCloseAuditAlarm{A,W}, ObjectOpenAuditAlarm{A,W},
ObjectPrivilegeAuditAlarm{A,W}, PrivilegedServiceAuditAlarm{A,W},
QueryServiceLockStatus{A,W}, SetAclInformation,
SetPrivateObjectSecurity, SetSecurityDescriptorControl,
SetServiceBits, LsaSetInformationPolicy, LsaLookupNames,
LsaEnumerateTrustedDomains.
2005-01-03 18:12:51 +01:00
|
|
|
DesiredAccess, Privileges, AccessGranted);
|
|
|
|
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
BOOL WINAPI PrivilegedServiceAuditAlarmA( LPCSTR SubsystemName, LPCSTR ServiceName, HANDLE ClientToken,
|
|
|
|
PPRIVILEGE_SET Privileges, BOOL AccessGranted)
|
|
|
|
{
|
|
|
|
FIXME("stub (%s,%s,%p,%p,%x)\n", debugstr_a(SubsystemName), debugstr_a(ServiceName),
|
|
|
|
ClientToken, Privileges, AccessGranted);
|
|
|
|
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
2021-02-05 04:24:11 +01:00
|
|
|
#define HKEY_SPECIAL_ROOT_FIRST HKEY_CLASSES_ROOT
|
|
|
|
#define HKEY_SPECIAL_ROOT_LAST HKEY_DYN_DATA
|
|
|
|
|
2004-08-26 02:29:06 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* GetSecurityInfo [ADVAPI32.@]
|
2008-08-07 21:54:58 +02:00
|
|
|
*
|
|
|
|
* Retrieves a copy of the security descriptor associated with an object.
|
|
|
|
*
|
|
|
|
* PARAMS
|
|
|
|
* hObject [I] A handle for the object.
|
|
|
|
* ObjectType [I] The type of object.
|
|
|
|
* SecurityInfo [I] A bitmask indicating what info to retrieve.
|
|
|
|
* ppsidOwner [O] If non-null, receives a pointer to the owner SID.
|
|
|
|
* ppsidGroup [O] If non-null, receives a pointer to the group SID.
|
|
|
|
* ppDacl [O] If non-null, receives a pointer to the DACL.
|
|
|
|
* ppSacl [O] If non-null, receives a pointer to the SACL.
|
|
|
|
* ppSecurityDescriptor [O] Receives a pointer to the security descriptor,
|
|
|
|
* which must be freed with LocalFree.
|
|
|
|
*
|
|
|
|
* RETURNS
|
|
|
|
* ERROR_SUCCESS if all's well, and a WIN32 error code otherwise.
|
2004-08-26 02:29:06 +02:00
|
|
|
*/
|
2020-04-28 05:35:30 +02:00
|
|
|
DWORD WINAPI GetSecurityInfo( HANDLE handle, SE_OBJECT_TYPE type, SECURITY_INFORMATION SecurityInfo,
|
|
|
|
PSID *ppsidOwner, PSID *ppsidGroup, PACL *ppDacl, PACL *ppSacl,
|
|
|
|
PSECURITY_DESCRIPTOR *ppSecurityDescriptor )
|
2004-08-26 02:29:06 +02:00
|
|
|
{
|
2008-08-07 21:54:58 +02:00
|
|
|
PSECURITY_DESCRIPTOR sd;
|
|
|
|
NTSTATUS status;
|
2020-04-28 05:35:30 +02:00
|
|
|
ULONG size;
|
2008-08-07 21:54:58 +02:00
|
|
|
BOOL present, defaulted;
|
|
|
|
|
2012-12-13 22:08:05 +01:00
|
|
|
/* A NULL descriptor is allowed if any one of the other pointers is not NULL */
|
|
|
|
if (!(ppsidOwner||ppsidGroup||ppDacl||ppSacl||ppSecurityDescriptor)) return ERROR_INVALID_PARAMETER;
|
|
|
|
|
|
|
|
/* If no descriptor, we have to check that there's a pointer for the requested information */
|
|
|
|
if( !ppSecurityDescriptor && (
|
|
|
|
((SecurityInfo & OWNER_SECURITY_INFORMATION) && !ppsidOwner)
|
|
|
|
|| ((SecurityInfo & GROUP_SECURITY_INFORMATION) && !ppsidGroup)
|
|
|
|
|| ((SecurityInfo & DACL_SECURITY_INFORMATION) && !ppDacl)
|
|
|
|
|| ((SecurityInfo & SACL_SECURITY_INFORMATION) && !ppSacl) ))
|
|
|
|
return ERROR_INVALID_PARAMETER;
|
|
|
|
|
2020-04-28 05:35:30 +02:00
|
|
|
if (type == SE_SERVICE)
|
2012-12-13 22:08:05 +01:00
|
|
|
{
|
2020-04-28 05:35:30 +02:00
|
|
|
if (!QueryServiceObjectSecurity( handle, SecurityInfo, NULL, 0, &size )
|
|
|
|
&& GetLastError() != ERROR_INSUFFICIENT_BUFFER)
|
|
|
|
return GetLastError();
|
2008-08-07 21:54:58 +02:00
|
|
|
|
2020-04-28 05:35:30 +02:00
|
|
|
if (!(sd = LocalAlloc( 0, size ))) return ERROR_NOT_ENOUGH_MEMORY;
|
2008-08-07 21:54:58 +02:00
|
|
|
|
2020-04-28 05:35:30 +02:00
|
|
|
if (!QueryServiceObjectSecurity( handle, SecurityInfo, sd, size, &size ))
|
|
|
|
{
|
|
|
|
LocalFree(sd);
|
|
|
|
return GetLastError();
|
|
|
|
}
|
2012-12-13 22:08:05 +01:00
|
|
|
}
|
2020-04-28 05:35:30 +02:00
|
|
|
else
|
2008-08-07 21:54:58 +02:00
|
|
|
{
|
2021-02-05 04:24:11 +01:00
|
|
|
HKEY key = NULL;
|
|
|
|
|
|
|
|
if (type == SE_REGISTRY_KEY && (HandleToUlong(handle) >= HandleToUlong(HKEY_SPECIAL_ROOT_FIRST))
|
|
|
|
&& (HandleToUlong(handle) <= HandleToUlong(HKEY_SPECIAL_ROOT_LAST)))
|
|
|
|
{
|
|
|
|
REGSAM access = READ_CONTROL;
|
|
|
|
DWORD ret;
|
|
|
|
|
|
|
|
if (SecurityInfo & SACL_SECURITY_INFORMATION)
|
|
|
|
access |= ACCESS_SYSTEM_SECURITY;
|
|
|
|
|
|
|
|
if ((ret = RegCreateKeyExW( handle, NULL, 0, NULL, 0, access, NULL, &key, NULL )))
|
|
|
|
return ret;
|
|
|
|
|
|
|
|
handle = key;
|
|
|
|
}
|
|
|
|
|
2020-04-28 05:35:30 +02:00
|
|
|
status = NtQuerySecurityObject( handle, SecurityInfo, NULL, 0, &size );
|
|
|
|
if (status != STATUS_SUCCESS && status != STATUS_BUFFER_TOO_SMALL)
|
2021-02-05 04:24:11 +01:00
|
|
|
{
|
|
|
|
RegCloseKey( key );
|
2020-04-28 05:35:30 +02:00
|
|
|
return RtlNtStatusToDosError( status );
|
2021-02-05 04:24:11 +01:00
|
|
|
}
|
2020-04-28 05:35:30 +02:00
|
|
|
|
2021-02-05 04:24:11 +01:00
|
|
|
if (!(sd = LocalAlloc( 0, size )))
|
|
|
|
{
|
|
|
|
RegCloseKey( key );
|
|
|
|
return ERROR_NOT_ENOUGH_MEMORY;
|
|
|
|
}
|
2020-04-28 05:35:30 +02:00
|
|
|
|
|
|
|
if ((status = NtQuerySecurityObject( handle, SecurityInfo, sd, size, &size )))
|
|
|
|
{
|
2021-02-05 04:24:11 +01:00
|
|
|
RegCloseKey( key );
|
2020-04-28 05:35:30 +02:00
|
|
|
LocalFree(sd);
|
|
|
|
return RtlNtStatusToDosError( status );
|
|
|
|
}
|
2021-02-05 04:24:11 +01:00
|
|
|
RegCloseKey( key );
|
2008-08-07 21:54:58 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
if (ppsidOwner)
|
|
|
|
{
|
|
|
|
*ppsidOwner = NULL;
|
|
|
|
GetSecurityDescriptorOwner(sd, ppsidOwner, &defaulted);
|
|
|
|
}
|
|
|
|
if (ppsidGroup)
|
|
|
|
{
|
|
|
|
*ppsidGroup = NULL;
|
|
|
|
GetSecurityDescriptorGroup(sd, ppsidGroup, &defaulted);
|
|
|
|
}
|
|
|
|
if (ppDacl)
|
|
|
|
{
|
|
|
|
*ppDacl = NULL;
|
|
|
|
GetSecurityDescriptorDacl(sd, &present, ppDacl, &defaulted);
|
|
|
|
}
|
|
|
|
if (ppSacl)
|
|
|
|
{
|
|
|
|
*ppSacl = NULL;
|
|
|
|
GetSecurityDescriptorSacl(sd, &present, ppSacl, &defaulted);
|
|
|
|
}
|
|
|
|
if (ppSecurityDescriptor)
|
|
|
|
*ppSecurityDescriptor = sd;
|
2010-01-14 20:35:09 +01:00
|
|
|
|
|
|
|
/* The security descriptor (sd) cannot be freed if ppSecurityDescriptor is
|
|
|
|
* NULL, because native happily returns the SIDs and ACLs that are requested
|
|
|
|
* in this case.
|
|
|
|
*/
|
2008-08-07 21:54:58 +02:00
|
|
|
|
|
|
|
return ERROR_SUCCESS;
|
2004-08-26 02:29:06 +02:00
|
|
|
}
|
|
|
|
|
2009-02-23 20:31:05 +01:00
|
|
|
/******************************************************************************
|
|
|
|
* GetSecurityInfoExA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI GetSecurityInfoExA(
|
|
|
|
HANDLE hObject, SE_OBJECT_TYPE ObjectType,
|
|
|
|
SECURITY_INFORMATION SecurityInfo, LPCSTR lpProvider,
|
|
|
|
LPCSTR lpProperty, PACTRL_ACCESSA *ppAccessList,
|
|
|
|
PACTRL_AUDITA *ppAuditList, LPSTR *lppOwner, LPSTR *lppGroup
|
|
|
|
)
|
|
|
|
{
|
|
|
|
FIXME("stub!\n");
|
|
|
|
return ERROR_BAD_PROVIDER;
|
|
|
|
}
|
|
|
|
|
2002-12-19 05:15:23 +01:00
|
|
|
/******************************************************************************
|
|
|
|
* GetSecurityInfoExW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI GetSecurityInfoExW(
|
|
|
|
HANDLE hObject, SE_OBJECT_TYPE ObjectType,
|
|
|
|
SECURITY_INFORMATION SecurityInfo, LPCWSTR lpProvider,
|
|
|
|
LPCWSTR lpProperty, PACTRL_ACCESSW *ppAccessList,
|
|
|
|
PACTRL_AUDITW *ppAuditList, LPWSTR *lppOwner, LPWSTR *lppGroup
|
|
|
|
)
|
|
|
|
{
|
|
|
|
FIXME("stub!\n");
|
|
|
|
return ERROR_BAD_PROVIDER;
|
|
|
|
}
|
2003-08-11 20:41:28 +02:00
|
|
|
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
/******************************************************************************
|
|
|
|
* BuildExplicitAccessWithNameA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
VOID WINAPI BuildExplicitAccessWithNameA( PEXPLICIT_ACCESSA pExplicitAccess,
|
|
|
|
LPSTR pTrusteeName, DWORD AccessPermissions,
|
|
|
|
ACCESS_MODE AccessMode, DWORD Inheritance )
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
TRACE("%p %s 0x%08lx 0x%08x 0x%08lx\n", pExplicitAccess, debugstr_a(pTrusteeName),
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
AccessPermissions, AccessMode, Inheritance);
|
|
|
|
|
|
|
|
pExplicitAccess->grfAccessPermissions = AccessPermissions;
|
|
|
|
pExplicitAccess->grfAccessMode = AccessMode;
|
|
|
|
pExplicitAccess->grfInheritance = Inheritance;
|
|
|
|
|
|
|
|
pExplicitAccess->Trustee.pMultipleTrustee = NULL;
|
|
|
|
pExplicitAccess->Trustee.MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
|
|
|
|
pExplicitAccess->Trustee.TrusteeForm = TRUSTEE_IS_NAME;
|
|
|
|
pExplicitAccess->Trustee.TrusteeType = TRUSTEE_IS_UNKNOWN;
|
|
|
|
pExplicitAccess->Trustee.ptstrName = pTrusteeName;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* BuildExplicitAccessWithNameW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
VOID WINAPI BuildExplicitAccessWithNameW( PEXPLICIT_ACCESSW pExplicitAccess,
|
|
|
|
LPWSTR pTrusteeName, DWORD AccessPermissions,
|
|
|
|
ACCESS_MODE AccessMode, DWORD Inheritance )
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
TRACE("%p %s 0x%08lx 0x%08x 0x%08lx\n", pExplicitAccess, debugstr_w(pTrusteeName),
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
AccessPermissions, AccessMode, Inheritance);
|
|
|
|
|
|
|
|
pExplicitAccess->grfAccessPermissions = AccessPermissions;
|
|
|
|
pExplicitAccess->grfAccessMode = AccessMode;
|
|
|
|
pExplicitAccess->grfInheritance = Inheritance;
|
|
|
|
|
|
|
|
pExplicitAccess->Trustee.pMultipleTrustee = NULL;
|
|
|
|
pExplicitAccess->Trustee.MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
|
|
|
|
pExplicitAccess->Trustee.TrusteeForm = TRUSTEE_IS_NAME;
|
|
|
|
pExplicitAccess->Trustee.TrusteeType = TRUSTEE_IS_UNKNOWN;
|
|
|
|
pExplicitAccess->Trustee.ptstrName = pTrusteeName;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* BuildTrusteeWithObjectsAndNameA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
VOID WINAPI BuildTrusteeWithObjectsAndNameA( PTRUSTEEA pTrustee, POBJECTS_AND_NAME_A pObjName,
|
|
|
|
SE_OBJECT_TYPE ObjectType, LPSTR ObjectTypeName,
|
|
|
|
LPSTR InheritedObjectTypeName, LPSTR Name )
|
|
|
|
{
|
2006-03-26 13:39:58 +02:00
|
|
|
DWORD ObjectsPresent = 0;
|
|
|
|
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
TRACE("%p %p 0x%08x %p %p %s\n", pTrustee, pObjName,
|
|
|
|
ObjectType, ObjectTypeName, InheritedObjectTypeName, debugstr_a(Name));
|
|
|
|
|
2006-03-26 13:39:58 +02:00
|
|
|
/* Fill the OBJECTS_AND_NAME structure */
|
|
|
|
pObjName->ObjectType = ObjectType;
|
|
|
|
if (ObjectTypeName != NULL)
|
|
|
|
{
|
|
|
|
ObjectsPresent |= ACE_OBJECT_TYPE_PRESENT;
|
|
|
|
}
|
|
|
|
|
|
|
|
pObjName->InheritedObjectTypeName = InheritedObjectTypeName;
|
|
|
|
if (InheritedObjectTypeName != NULL)
|
|
|
|
{
|
|
|
|
ObjectsPresent |= ACE_INHERITED_OBJECT_TYPE_PRESENT;
|
|
|
|
}
|
|
|
|
|
|
|
|
pObjName->ObjectsPresent = ObjectsPresent;
|
|
|
|
pObjName->ptstrName = Name;
|
|
|
|
|
|
|
|
/* Fill the TRUSTEE structure */
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
pTrustee->pMultipleTrustee = NULL;
|
|
|
|
pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
|
|
|
|
pTrustee->TrusteeForm = TRUSTEE_IS_OBJECTS_AND_NAME;
|
|
|
|
pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
|
2006-03-28 14:43:18 +02:00
|
|
|
pTrustee->ptstrName = (LPSTR)pObjName;
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* BuildTrusteeWithObjectsAndNameW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
VOID WINAPI BuildTrusteeWithObjectsAndNameW( PTRUSTEEW pTrustee, POBJECTS_AND_NAME_W pObjName,
|
|
|
|
SE_OBJECT_TYPE ObjectType, LPWSTR ObjectTypeName,
|
|
|
|
LPWSTR InheritedObjectTypeName, LPWSTR Name )
|
|
|
|
{
|
2006-03-26 13:39:58 +02:00
|
|
|
DWORD ObjectsPresent = 0;
|
|
|
|
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
TRACE("%p %p 0x%08x %p %p %s\n", pTrustee, pObjName,
|
|
|
|
ObjectType, ObjectTypeName, InheritedObjectTypeName, debugstr_w(Name));
|
|
|
|
|
2006-03-26 13:39:58 +02:00
|
|
|
/* Fill the OBJECTS_AND_NAME structure */
|
|
|
|
pObjName->ObjectType = ObjectType;
|
|
|
|
if (ObjectTypeName != NULL)
|
|
|
|
{
|
|
|
|
ObjectsPresent |= ACE_OBJECT_TYPE_PRESENT;
|
|
|
|
}
|
|
|
|
|
|
|
|
pObjName->InheritedObjectTypeName = InheritedObjectTypeName;
|
|
|
|
if (InheritedObjectTypeName != NULL)
|
|
|
|
{
|
|
|
|
ObjectsPresent |= ACE_INHERITED_OBJECT_TYPE_PRESENT;
|
|
|
|
}
|
|
|
|
|
|
|
|
pObjName->ObjectsPresent = ObjectsPresent;
|
|
|
|
pObjName->ptstrName = Name;
|
|
|
|
|
|
|
|
/* Fill the TRUSTEE structure */
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
pTrustee->pMultipleTrustee = NULL;
|
|
|
|
pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
|
|
|
|
pTrustee->TrusteeForm = TRUSTEE_IS_OBJECTS_AND_NAME;
|
|
|
|
pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
|
2006-03-26 13:39:58 +02:00
|
|
|
pTrustee->ptstrName = (LPWSTR)pObjName;
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
}
|
|
|
|
|
2006-05-12 00:34:55 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* BuildTrusteeWithObjectsAndSidA [ADVAPI32.@]
|
|
|
|
*/
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
VOID WINAPI BuildTrusteeWithObjectsAndSidA( PTRUSTEEA pTrustee, POBJECTS_AND_SID pObjSid,
|
|
|
|
GUID* pObjectGuid, GUID* pInheritedObjectGuid, PSID pSid )
|
|
|
|
{
|
2006-03-26 13:39:58 +02:00
|
|
|
DWORD ObjectsPresent = 0;
|
|
|
|
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
TRACE("%p %p %p %p %p\n", pTrustee, pObjSid, pObjectGuid, pInheritedObjectGuid, pSid);
|
|
|
|
|
2006-03-26 13:39:58 +02:00
|
|
|
/* Fill the OBJECTS_AND_SID structure */
|
|
|
|
if (pObjectGuid != NULL)
|
|
|
|
{
|
|
|
|
pObjSid->ObjectTypeGuid = *pObjectGuid;
|
|
|
|
ObjectsPresent |= ACE_OBJECT_TYPE_PRESENT;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
ZeroMemory(&pObjSid->ObjectTypeGuid,
|
|
|
|
sizeof(GUID));
|
|
|
|
}
|
|
|
|
|
|
|
|
if (pInheritedObjectGuid != NULL)
|
|
|
|
{
|
|
|
|
pObjSid->InheritedObjectTypeGuid = *pInheritedObjectGuid;
|
|
|
|
ObjectsPresent |= ACE_INHERITED_OBJECT_TYPE_PRESENT;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
ZeroMemory(&pObjSid->InheritedObjectTypeGuid,
|
|
|
|
sizeof(GUID));
|
|
|
|
}
|
|
|
|
|
|
|
|
pObjSid->ObjectsPresent = ObjectsPresent;
|
|
|
|
pObjSid->pSid = pSid;
|
|
|
|
|
|
|
|
/* Fill the TRUSTEE structure */
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
pTrustee->pMultipleTrustee = NULL;
|
|
|
|
pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
|
|
|
|
pTrustee->TrusteeForm = TRUSTEE_IS_OBJECTS_AND_SID;
|
|
|
|
pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
|
2006-03-26 13:39:58 +02:00
|
|
|
pTrustee->ptstrName = (LPSTR) pObjSid;
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
}
|
|
|
|
|
2006-05-12 00:34:55 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* BuildTrusteeWithObjectsAndSidW [ADVAPI32.@]
|
|
|
|
*/
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
VOID WINAPI BuildTrusteeWithObjectsAndSidW( PTRUSTEEW pTrustee, POBJECTS_AND_SID pObjSid,
|
|
|
|
GUID* pObjectGuid, GUID* pInheritedObjectGuid, PSID pSid )
|
|
|
|
{
|
2006-03-26 13:39:58 +02:00
|
|
|
DWORD ObjectsPresent = 0;
|
|
|
|
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
TRACE("%p %p %p %p %p\n", pTrustee, pObjSid, pObjectGuid, pInheritedObjectGuid, pSid);
|
|
|
|
|
2006-03-26 13:39:58 +02:00
|
|
|
/* Fill the OBJECTS_AND_SID structure */
|
|
|
|
if (pObjectGuid != NULL)
|
|
|
|
{
|
|
|
|
pObjSid->ObjectTypeGuid = *pObjectGuid;
|
|
|
|
ObjectsPresent |= ACE_OBJECT_TYPE_PRESENT;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
ZeroMemory(&pObjSid->ObjectTypeGuid,
|
|
|
|
sizeof(GUID));
|
|
|
|
}
|
|
|
|
|
|
|
|
if (pInheritedObjectGuid != NULL)
|
|
|
|
{
|
|
|
|
pObjSid->InheritedObjectTypeGuid = *pInheritedObjectGuid;
|
|
|
|
ObjectsPresent |= ACE_INHERITED_OBJECT_TYPE_PRESENT;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
ZeroMemory(&pObjSid->InheritedObjectTypeGuid,
|
|
|
|
sizeof(GUID));
|
|
|
|
}
|
|
|
|
|
|
|
|
pObjSid->ObjectsPresent = ObjectsPresent;
|
|
|
|
pObjSid->pSid = pSid;
|
|
|
|
|
|
|
|
/* Fill the TRUSTEE structure */
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
pTrustee->pMultipleTrustee = NULL;
|
|
|
|
pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
|
|
|
|
pTrustee->TrusteeForm = TRUSTEE_IS_OBJECTS_AND_SID;
|
|
|
|
pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
|
2006-03-26 13:39:58 +02:00
|
|
|
pTrustee->ptstrName = (LPWSTR) pObjSid;
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
}
|
|
|
|
|
2003-08-11 20:41:28 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* BuildTrusteeWithSidA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
VOID WINAPI BuildTrusteeWithSidA(PTRUSTEEA pTrustee, PSID pSid)
|
|
|
|
{
|
2004-08-16 23:07:50 +02:00
|
|
|
TRACE("%p %p\n", pTrustee, pSid);
|
|
|
|
|
|
|
|
pTrustee->pMultipleTrustee = NULL;
|
|
|
|
pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
|
2004-08-19 21:01:12 +02:00
|
|
|
pTrustee->TrusteeForm = TRUSTEE_IS_SID;
|
2004-08-16 23:07:50 +02:00
|
|
|
pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
|
2009-02-16 09:53:37 +01:00
|
|
|
pTrustee->ptstrName = pSid;
|
2003-08-11 20:41:28 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* BuildTrusteeWithSidW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
VOID WINAPI BuildTrusteeWithSidW(PTRUSTEEW pTrustee, PSID pSid)
|
|
|
|
{
|
2004-08-16 23:07:50 +02:00
|
|
|
TRACE("%p %p\n", pTrustee, pSid);
|
|
|
|
|
|
|
|
pTrustee->pMultipleTrustee = NULL;
|
|
|
|
pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
|
2004-08-19 21:01:12 +02:00
|
|
|
pTrustee->TrusteeForm = TRUSTEE_IS_SID;
|
2004-08-16 23:07:50 +02:00
|
|
|
pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
|
2009-02-16 09:53:37 +01:00
|
|
|
pTrustee->ptstrName = pSid;
|
2003-08-11 20:41:28 +02:00
|
|
|
}
|
2003-08-12 20:53:14 +02:00
|
|
|
|
2004-08-19 21:01:12 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* BuildTrusteeWithNameA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
VOID WINAPI BuildTrusteeWithNameA(PTRUSTEEA pTrustee, LPSTR name)
|
|
|
|
{
|
|
|
|
TRACE("%p %s\n", pTrustee, debugstr_a(name) );
|
|
|
|
|
|
|
|
pTrustee->pMultipleTrustee = NULL;
|
|
|
|
pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
|
|
|
|
pTrustee->TrusteeForm = TRUSTEE_IS_NAME;
|
|
|
|
pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
|
|
|
|
pTrustee->ptstrName = name;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* BuildTrusteeWithNameW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
VOID WINAPI BuildTrusteeWithNameW(PTRUSTEEW pTrustee, LPWSTR name)
|
|
|
|
{
|
|
|
|
TRACE("%p %s\n", pTrustee, debugstr_w(name) );
|
|
|
|
|
|
|
|
pTrustee->pMultipleTrustee = NULL;
|
|
|
|
pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
|
|
|
|
pTrustee->TrusteeForm = TRUSTEE_IS_NAME;
|
|
|
|
pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
|
|
|
|
pTrustee->ptstrName = name;
|
|
|
|
}
|
|
|
|
|
2005-06-21 22:20:47 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* GetTrusteeFormA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
TRUSTEE_FORM WINAPI GetTrusteeFormA(PTRUSTEEA pTrustee)
|
|
|
|
{
|
|
|
|
TRACE("(%p)\n", pTrustee);
|
|
|
|
|
|
|
|
if (!pTrustee)
|
|
|
|
return TRUSTEE_BAD_FORM;
|
|
|
|
|
|
|
|
return pTrustee->TrusteeForm;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* GetTrusteeFormW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
TRUSTEE_FORM WINAPI GetTrusteeFormW(PTRUSTEEW pTrustee)
|
|
|
|
{
|
|
|
|
TRACE("(%p)\n", pTrustee);
|
|
|
|
|
|
|
|
if (!pTrustee)
|
|
|
|
return TRUSTEE_BAD_FORM;
|
|
|
|
|
|
|
|
return pTrustee->TrusteeForm;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* GetTrusteeNameA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
LPSTR WINAPI GetTrusteeNameA(PTRUSTEEA pTrustee)
|
|
|
|
{
|
|
|
|
TRACE("(%p)\n", pTrustee);
|
|
|
|
|
|
|
|
if (!pTrustee)
|
|
|
|
return NULL;
|
|
|
|
|
|
|
|
return pTrustee->ptstrName;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* GetTrusteeNameW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
LPWSTR WINAPI GetTrusteeNameW(PTRUSTEEW pTrustee)
|
|
|
|
{
|
|
|
|
TRACE("(%p)\n", pTrustee);
|
|
|
|
|
|
|
|
if (!pTrustee)
|
|
|
|
return NULL;
|
|
|
|
|
|
|
|
return pTrustee->ptstrName;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* GetTrusteeTypeA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
TRUSTEE_TYPE WINAPI GetTrusteeTypeA(PTRUSTEEA pTrustee)
|
|
|
|
{
|
|
|
|
TRACE("(%p)\n", pTrustee);
|
|
|
|
|
|
|
|
if (!pTrustee)
|
|
|
|
return TRUSTEE_IS_UNKNOWN;
|
|
|
|
|
|
|
|
return pTrustee->TrusteeType;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* GetTrusteeTypeW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
TRUSTEE_TYPE WINAPI GetTrusteeTypeW(PTRUSTEEW pTrustee)
|
|
|
|
{
|
|
|
|
TRACE("(%p)\n", pTrustee);
|
|
|
|
|
|
|
|
if (!pTrustee)
|
|
|
|
return TRUSTEE_IS_UNKNOWN;
|
|
|
|
|
|
|
|
return pTrustee->TrusteeType;
|
|
|
|
}
|
|
|
|
|
2011-03-16 08:25:36 +01:00
|
|
|
static DWORD trustee_name_A_to_W(TRUSTEE_FORM form, char *trustee_nameA, WCHAR **ptrustee_nameW)
|
2011-01-12 06:37:51 +01:00
|
|
|
{
|
|
|
|
switch (form)
|
|
|
|
{
|
|
|
|
case TRUSTEE_IS_NAME:
|
|
|
|
{
|
2020-04-28 05:35:31 +02:00
|
|
|
*ptrustee_nameW = strdupAW(trustee_nameA);
|
2011-01-12 06:37:51 +01:00
|
|
|
return ERROR_SUCCESS;
|
|
|
|
}
|
|
|
|
case TRUSTEE_IS_OBJECTS_AND_NAME:
|
|
|
|
{
|
|
|
|
OBJECTS_AND_NAME_A *objA = (OBJECTS_AND_NAME_A *)trustee_nameA;
|
|
|
|
OBJECTS_AND_NAME_W *objW = NULL;
|
|
|
|
|
|
|
|
if (objA)
|
|
|
|
{
|
2014-08-27 13:48:17 +02:00
|
|
|
if (!(objW = heap_alloc( sizeof(OBJECTS_AND_NAME_W) )))
|
2011-01-12 06:37:51 +01:00
|
|
|
return ERROR_NOT_ENOUGH_MEMORY;
|
|
|
|
|
|
|
|
objW->ObjectsPresent = objA->ObjectsPresent;
|
|
|
|
objW->ObjectType = objA->ObjectType;
|
2020-04-28 05:35:31 +02:00
|
|
|
objW->ObjectTypeName = strdupAW(objA->ObjectTypeName);
|
|
|
|
objW->InheritedObjectTypeName = strdupAW(objA->InheritedObjectTypeName);
|
|
|
|
objW->ptstrName = strdupAW(objA->ptstrName);
|
2011-01-12 06:37:51 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
*ptrustee_nameW = (WCHAR *)objW;
|
|
|
|
return ERROR_SUCCESS;
|
|
|
|
}
|
|
|
|
/* These forms do not require conversion. */
|
|
|
|
case TRUSTEE_IS_SID:
|
|
|
|
case TRUSTEE_IS_OBJECTS_AND_SID:
|
|
|
|
*ptrustee_nameW = (WCHAR *)trustee_nameA;
|
|
|
|
return ERROR_SUCCESS;
|
|
|
|
default:
|
|
|
|
return ERROR_INVALID_PARAMETER;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2011-03-16 08:25:36 +01:00
|
|
|
static void free_trustee_name(TRUSTEE_FORM form, WCHAR *trustee_nameW)
|
2011-01-12 06:37:51 +01:00
|
|
|
{
|
|
|
|
switch (form)
|
|
|
|
{
|
|
|
|
case TRUSTEE_IS_NAME:
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free( trustee_nameW );
|
2011-01-12 06:37:51 +01:00
|
|
|
break;
|
|
|
|
case TRUSTEE_IS_OBJECTS_AND_NAME:
|
|
|
|
{
|
|
|
|
OBJECTS_AND_NAME_W *objW = (OBJECTS_AND_NAME_W *)trustee_nameW;
|
|
|
|
|
|
|
|
if (objW)
|
|
|
|
{
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free( objW->ptstrName );
|
|
|
|
heap_free( objW->InheritedObjectTypeName );
|
|
|
|
heap_free( objW->ObjectTypeName );
|
|
|
|
heap_free( objW );
|
2011-01-12 06:37:51 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
/* Other forms did not require allocation, so no freeing is necessary. */
|
|
|
|
default:
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2018-04-18 02:25:27 +02:00
|
|
|
static DWORD trustee_to_sid( DWORD nDestinationSidLength, PSID pDestinationSid, PTRUSTEEW pTrustee )
|
|
|
|
{
|
|
|
|
if (pTrustee->MultipleTrusteeOperation == TRUSTEE_IS_IMPERSONATE)
|
|
|
|
{
|
|
|
|
WARN("bad multiple trustee operation %d\n", pTrustee->MultipleTrusteeOperation);
|
|
|
|
return ERROR_INVALID_PARAMETER;
|
|
|
|
}
|
|
|
|
|
|
|
|
switch (pTrustee->TrusteeForm)
|
|
|
|
{
|
|
|
|
case TRUSTEE_IS_SID:
|
|
|
|
if (!CopySid(nDestinationSidLength, pDestinationSid, pTrustee->ptstrName))
|
|
|
|
{
|
|
|
|
WARN("bad sid %p\n", pTrustee->ptstrName);
|
|
|
|
return ERROR_INVALID_PARAMETER;
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
case TRUSTEE_IS_NAME:
|
|
|
|
{
|
|
|
|
DWORD sid_size = nDestinationSidLength;
|
|
|
|
DWORD domain_size = MAX_COMPUTERNAME_LENGTH + 1;
|
|
|
|
SID_NAME_USE use;
|
2020-09-10 15:20:10 +02:00
|
|
|
if (!wcscmp( pTrustee->ptstrName, L"CURRENT_USER" ))
|
2018-04-18 02:25:27 +02:00
|
|
|
{
|
|
|
|
if (!lookup_user_account_name( pDestinationSid, &sid_size, NULL, &domain_size, &use ))
|
|
|
|
{
|
|
|
|
return GetLastError();
|
|
|
|
}
|
|
|
|
}
|
|
|
|
else if (!LookupAccountNameW(NULL, pTrustee->ptstrName, pDestinationSid, &sid_size, NULL, &domain_size, &use))
|
|
|
|
{
|
|
|
|
WARN("bad user name %s\n", debugstr_w(pTrustee->ptstrName));
|
|
|
|
return ERROR_INVALID_PARAMETER;
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
case TRUSTEE_IS_OBJECTS_AND_SID:
|
|
|
|
FIXME("TRUSTEE_IS_OBJECTS_AND_SID unimplemented\n");
|
|
|
|
break;
|
|
|
|
case TRUSTEE_IS_OBJECTS_AND_NAME:
|
|
|
|
FIXME("TRUSTEE_IS_OBJECTS_AND_NAME unimplemented\n");
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
WARN("bad trustee form %d\n", pTrustee->TrusteeForm);
|
|
|
|
return ERROR_INVALID_PARAMETER;
|
|
|
|
}
|
|
|
|
|
|
|
|
return ERROR_SUCCESS;
|
|
|
|
}
|
|
|
|
|
2003-08-12 20:53:14 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* SetEntriesInAclA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI SetEntriesInAclA( ULONG count, PEXPLICIT_ACCESSA pEntries,
|
|
|
|
PACL OldAcl, PACL* NewAcl )
|
|
|
|
{
|
2011-01-01 21:19:55 +01:00
|
|
|
DWORD err = ERROR_SUCCESS;
|
2011-01-12 06:37:51 +01:00
|
|
|
EXPLICIT_ACCESSW *pEntriesW;
|
2011-10-05 17:01:24 +02:00
|
|
|
UINT alloc_index, free_index;
|
2011-01-01 21:19:55 +01:00
|
|
|
|
2022-02-07 23:10:27 +01:00
|
|
|
TRACE("%ld %p %p %p\n", count, pEntries, OldAcl, NewAcl);
|
2011-01-01 21:19:55 +01:00
|
|
|
|
2008-10-04 10:35:32 +02:00
|
|
|
if (NewAcl)
|
2011-01-01 21:19:55 +01:00
|
|
|
*NewAcl = NULL;
|
|
|
|
|
|
|
|
if (!count && !OldAcl)
|
|
|
|
return ERROR_SUCCESS;
|
|
|
|
|
2014-08-27 13:48:17 +02:00
|
|
|
pEntriesW = heap_alloc( count * sizeof(EXPLICIT_ACCESSW) );
|
2011-01-12 06:37:51 +01:00
|
|
|
if (!pEntriesW)
|
|
|
|
return ERROR_NOT_ENOUGH_MEMORY;
|
2011-01-01 21:19:55 +01:00
|
|
|
|
2011-01-12 06:37:51 +01:00
|
|
|
for (alloc_index = 0; alloc_index < count; ++alloc_index)
|
|
|
|
{
|
|
|
|
pEntriesW[alloc_index].grfAccessPermissions = pEntries[alloc_index].grfAccessPermissions;
|
|
|
|
pEntriesW[alloc_index].grfAccessMode = pEntries[alloc_index].grfAccessMode;
|
|
|
|
pEntriesW[alloc_index].grfInheritance = pEntries[alloc_index].grfInheritance;
|
|
|
|
pEntriesW[alloc_index].Trustee.pMultipleTrustee = NULL; /* currently not supported */
|
|
|
|
pEntriesW[alloc_index].Trustee.MultipleTrusteeOperation = pEntries[alloc_index].Trustee.MultipleTrusteeOperation;
|
|
|
|
pEntriesW[alloc_index].Trustee.TrusteeForm = pEntries[alloc_index].Trustee.TrusteeForm;
|
|
|
|
pEntriesW[alloc_index].Trustee.TrusteeType = pEntries[alloc_index].Trustee.TrusteeType;
|
|
|
|
|
|
|
|
err = trustee_name_A_to_W( pEntries[alloc_index].Trustee.TrusteeForm,
|
|
|
|
pEntries[alloc_index].Trustee.ptstrName,
|
|
|
|
&pEntriesW[alloc_index].Trustee.ptstrName );
|
|
|
|
if (err != ERROR_SUCCESS)
|
2011-01-01 21:19:55 +01:00
|
|
|
{
|
2011-01-12 06:37:51 +01:00
|
|
|
if (err == ERROR_INVALID_PARAMETER)
|
|
|
|
WARN("bad trustee form %d for trustee %d\n",
|
|
|
|
pEntries[alloc_index].Trustee.TrusteeForm, alloc_index);
|
2011-01-01 21:19:55 +01:00
|
|
|
|
2011-01-12 06:37:51 +01:00
|
|
|
goto cleanup;
|
2011-01-01 21:19:55 +01:00
|
|
|
}
|
|
|
|
}
|
2011-01-12 06:37:51 +01:00
|
|
|
|
|
|
|
err = SetEntriesInAclW( count, pEntriesW, OldAcl, NewAcl );
|
|
|
|
|
|
|
|
cleanup:
|
|
|
|
/* Free any previously allocated trustee name buffers, taking into account
|
|
|
|
* a possible out-of-memory condition while building the EXPLICIT_ACCESSW
|
|
|
|
* list. */
|
|
|
|
for (free_index = 0; free_index < alloc_index; ++free_index)
|
|
|
|
free_trustee_name( pEntriesW[free_index].Trustee.TrusteeForm, pEntriesW[free_index].Trustee.ptstrName );
|
|
|
|
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free( pEntriesW );
|
2011-01-01 21:19:55 +01:00
|
|
|
return err;
|
2003-08-12 20:53:14 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* SetEntriesInAclW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI SetEntriesInAclW( ULONG count, PEXPLICIT_ACCESSW pEntries,
|
|
|
|
PACL OldAcl, PACL* NewAcl )
|
|
|
|
{
|
2008-01-22 16:36:36 +01:00
|
|
|
ULONG i;
|
|
|
|
PSID *ppsid;
|
|
|
|
DWORD ret = ERROR_SUCCESS;
|
|
|
|
DWORD acl_size = sizeof(ACL);
|
|
|
|
NTSTATUS status;
|
|
|
|
|
2022-02-07 23:10:27 +01:00
|
|
|
TRACE("%ld %p %p %p\n", count, pEntries, OldAcl, NewAcl);
|
2008-01-22 16:36:36 +01:00
|
|
|
|
2011-01-01 21:19:55 +01:00
|
|
|
if (NewAcl)
|
|
|
|
*NewAcl = NULL;
|
2008-01-22 16:36:36 +01:00
|
|
|
|
|
|
|
if (!count && !OldAcl)
|
|
|
|
return ERROR_SUCCESS;
|
|
|
|
|
|
|
|
/* allocate array of maximum sized sids allowed */
|
2014-08-27 13:48:17 +02:00
|
|
|
ppsid = heap_alloc(count * (sizeof(SID *) + FIELD_OFFSET(SID, SubAuthority[SID_MAX_SUB_AUTHORITIES])));
|
2008-01-22 16:36:36 +01:00
|
|
|
if (!ppsid)
|
|
|
|
return ERROR_OUTOFMEMORY;
|
|
|
|
|
|
|
|
for (i = 0; i < count; i++)
|
|
|
|
{
|
|
|
|
ppsid[i] = (char *)&ppsid[count] + i * FIELD_OFFSET(SID, SubAuthority[SID_MAX_SUB_AUTHORITIES]);
|
|
|
|
|
2022-02-07 23:10:27 +01:00
|
|
|
TRACE("[%ld]:\n\tgrfAccessPermissions = 0x%lx\n\tgrfAccessMode = %d\n\tgrfInheritance = 0x%lx\n\t"
|
2008-01-22 16:36:36 +01:00
|
|
|
"Trustee.pMultipleTrustee = %p\n\tMultipleTrusteeOperation = %d\n\tTrusteeForm = %d\n\t"
|
|
|
|
"Trustee.TrusteeType = %d\n\tptstrName = %p\n", i,
|
|
|
|
pEntries[i].grfAccessPermissions, pEntries[i].grfAccessMode, pEntries[i].grfInheritance,
|
|
|
|
pEntries[i].Trustee.pMultipleTrustee, pEntries[i].Trustee.MultipleTrusteeOperation,
|
|
|
|
pEntries[i].Trustee.TrusteeForm, pEntries[i].Trustee.TrusteeType,
|
|
|
|
pEntries[i].Trustee.ptstrName);
|
|
|
|
|
2018-04-18 02:25:27 +02:00
|
|
|
ret = trustee_to_sid( FIELD_OFFSET(SID, SubAuthority[SID_MAX_SUB_AUTHORITIES]), ppsid[i], &pEntries[i].Trustee);
|
|
|
|
if (ret)
|
2008-01-22 16:36:36 +01:00
|
|
|
goto exit;
|
|
|
|
|
|
|
|
/* Note: we overestimate the ACL size here as a tradeoff between
|
|
|
|
* instructions (simplicity) and memory */
|
|
|
|
switch (pEntries[i].grfAccessMode)
|
|
|
|
{
|
|
|
|
case GRANT_ACCESS:
|
|
|
|
case SET_ACCESS:
|
|
|
|
acl_size += FIELD_OFFSET(ACCESS_ALLOWED_ACE, SidStart) + GetLengthSid(ppsid[i]);
|
|
|
|
break;
|
|
|
|
case DENY_ACCESS:
|
|
|
|
acl_size += FIELD_OFFSET(ACCESS_DENIED_ACE, SidStart) + GetLengthSid(ppsid[i]);
|
|
|
|
break;
|
|
|
|
case SET_AUDIT_SUCCESS:
|
|
|
|
case SET_AUDIT_FAILURE:
|
|
|
|
acl_size += FIELD_OFFSET(SYSTEM_AUDIT_ACE, SidStart) + GetLengthSid(ppsid[i]);
|
|
|
|
break;
|
|
|
|
case REVOKE_ACCESS:
|
|
|
|
break;
|
|
|
|
default:
|
2022-02-07 23:10:27 +01:00
|
|
|
WARN("bad access mode %d for trustee %ld\n", pEntries[i].grfAccessMode, i);
|
2008-01-22 16:36:36 +01:00
|
|
|
ret = ERROR_INVALID_PARAMETER;
|
|
|
|
goto exit;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (OldAcl)
|
|
|
|
{
|
|
|
|
ACL_SIZE_INFORMATION size_info;
|
|
|
|
|
|
|
|
status = RtlQueryInformationAcl(OldAcl, &size_info, sizeof(size_info), AclSizeInformation);
|
|
|
|
if (status != STATUS_SUCCESS)
|
|
|
|
{
|
|
|
|
ret = RtlNtStatusToDosError(status);
|
|
|
|
goto exit;
|
|
|
|
}
|
|
|
|
acl_size += size_info.AclBytesInUse - sizeof(ACL);
|
|
|
|
}
|
|
|
|
|
|
|
|
*NewAcl = LocalAlloc(0, acl_size);
|
|
|
|
if (!*NewAcl)
|
|
|
|
{
|
|
|
|
ret = ERROR_OUTOFMEMORY;
|
|
|
|
goto exit;
|
|
|
|
}
|
|
|
|
|
|
|
|
status = RtlCreateAcl( *NewAcl, acl_size, ACL_REVISION );
|
|
|
|
if (status != STATUS_SUCCESS)
|
|
|
|
{
|
|
|
|
ret = RtlNtStatusToDosError(status);
|
|
|
|
goto exit;
|
|
|
|
}
|
|
|
|
|
|
|
|
for (i = 0; i < count; i++)
|
|
|
|
{
|
|
|
|
switch (pEntries[i].grfAccessMode)
|
|
|
|
{
|
|
|
|
case GRANT_ACCESS:
|
|
|
|
status = RtlAddAccessAllowedAceEx(*NewAcl, ACL_REVISION,
|
|
|
|
pEntries[i].grfInheritance,
|
|
|
|
pEntries[i].grfAccessPermissions,
|
|
|
|
ppsid[i]);
|
|
|
|
break;
|
|
|
|
case SET_ACCESS:
|
|
|
|
{
|
|
|
|
ULONG j;
|
|
|
|
BOOL add = TRUE;
|
|
|
|
if (OldAcl)
|
|
|
|
{
|
|
|
|
for (j = 0; ; j++)
|
|
|
|
{
|
|
|
|
const ACE_HEADER *existing_ace_header;
|
|
|
|
status = RtlGetAce(OldAcl, j, (LPVOID *)&existing_ace_header);
|
|
|
|
if (status != STATUS_SUCCESS)
|
|
|
|
break;
|
|
|
|
if (pEntries[i].grfAccessMode == SET_ACCESS &&
|
|
|
|
existing_ace_header->AceType == ACCESS_ALLOWED_ACE_TYPE &&
|
|
|
|
EqualSid(ppsid[i], &((ACCESS_ALLOWED_ACE *)existing_ace_header)->SidStart))
|
|
|
|
{
|
|
|
|
add = FALSE;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
if (add)
|
|
|
|
status = RtlAddAccessAllowedAceEx(*NewAcl, ACL_REVISION,
|
|
|
|
pEntries[i].grfInheritance,
|
|
|
|
pEntries[i].grfAccessPermissions,
|
|
|
|
ppsid[i]);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
case DENY_ACCESS:
|
|
|
|
status = RtlAddAccessDeniedAceEx(*NewAcl, ACL_REVISION,
|
|
|
|
pEntries[i].grfInheritance,
|
|
|
|
pEntries[i].grfAccessPermissions,
|
|
|
|
ppsid[i]);
|
|
|
|
break;
|
|
|
|
case SET_AUDIT_SUCCESS:
|
|
|
|
status = RtlAddAuditAccessAceEx(*NewAcl, ACL_REVISION,
|
|
|
|
pEntries[i].grfInheritance,
|
|
|
|
pEntries[i].grfAccessPermissions,
|
|
|
|
ppsid[i], TRUE, FALSE);
|
|
|
|
break;
|
|
|
|
case SET_AUDIT_FAILURE:
|
|
|
|
status = RtlAddAuditAccessAceEx(*NewAcl, ACL_REVISION,
|
|
|
|
pEntries[i].grfInheritance,
|
|
|
|
pEntries[i].grfAccessPermissions,
|
|
|
|
ppsid[i], FALSE, TRUE);
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
FIXME("unhandled access mode %d\n", pEntries[i].grfAccessMode);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (OldAcl)
|
|
|
|
{
|
|
|
|
for (i = 0; ; i++)
|
|
|
|
{
|
|
|
|
BOOL add = TRUE;
|
|
|
|
ULONG j;
|
|
|
|
const ACE_HEADER *old_ace_header;
|
|
|
|
status = RtlGetAce(OldAcl, i, (LPVOID *)&old_ace_header);
|
|
|
|
if (status != STATUS_SUCCESS) break;
|
|
|
|
for (j = 0; j < count; j++)
|
|
|
|
{
|
|
|
|
if (pEntries[j].grfAccessMode == SET_ACCESS &&
|
|
|
|
old_ace_header->AceType == ACCESS_ALLOWED_ACE_TYPE &&
|
|
|
|
EqualSid(ppsid[j], &((ACCESS_ALLOWED_ACE *)old_ace_header)->SidStart))
|
|
|
|
{
|
|
|
|
status = RtlAddAccessAllowedAceEx(*NewAcl, ACL_REVISION, pEntries[j].grfInheritance, pEntries[j].grfAccessPermissions, ppsid[j]);
|
|
|
|
add = FALSE;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
else if (pEntries[j].grfAccessMode == REVOKE_ACCESS)
|
|
|
|
{
|
|
|
|
switch (old_ace_header->AceType)
|
|
|
|
{
|
|
|
|
case ACCESS_ALLOWED_ACE_TYPE:
|
|
|
|
if (EqualSid(ppsid[j], &((ACCESS_ALLOWED_ACE *)old_ace_header)->SidStart))
|
|
|
|
add = FALSE;
|
|
|
|
break;
|
|
|
|
case ACCESS_DENIED_ACE_TYPE:
|
2021-03-02 06:18:01 +01:00
|
|
|
/* REVOKE_ACCESS does not affect ACCESS_DENIED_ACE. */
|
2008-01-22 16:36:36 +01:00
|
|
|
break;
|
|
|
|
case SYSTEM_AUDIT_ACE_TYPE:
|
|
|
|
if (EqualSid(ppsid[j], &((SYSTEM_AUDIT_ACE *)old_ace_header)->SidStart))
|
|
|
|
add = FALSE;
|
|
|
|
break;
|
|
|
|
case SYSTEM_ALARM_ACE_TYPE:
|
|
|
|
if (EqualSid(ppsid[j], &((SYSTEM_ALARM_ACE *)old_ace_header)->SidStart))
|
|
|
|
add = FALSE;
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
FIXME("unhandled ace type %d\n", old_ace_header->AceType);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (!add)
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
if (add)
|
|
|
|
status = RtlAddAce(*NewAcl, ACL_REVISION, 1, (PACE_HEADER)old_ace_header, old_ace_header->AceSize);
|
|
|
|
if (status != STATUS_SUCCESS)
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
WARN("RtlAddAce failed with error 0x%08lx\n", status);
|
2008-01-22 16:36:36 +01:00
|
|
|
ret = RtlNtStatusToDosError(status);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
exit:
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free(ppsid);
|
2008-01-22 16:36:36 +01:00
|
|
|
return ret;
|
2003-08-12 20:53:14 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* SetNamedSecurityInfoA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI SetNamedSecurityInfoA(LPSTR pObjectName,
|
|
|
|
SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo,
|
|
|
|
PSID psidOwner, PSID psidGroup, PACL pDacl, PACL pSacl)
|
|
|
|
{
|
2012-09-13 22:54:37 +02:00
|
|
|
LPWSTR wstr;
|
2004-08-10 00:55:47 +02:00
|
|
|
DWORD r;
|
|
|
|
|
2022-02-07 23:10:27 +01:00
|
|
|
TRACE("%s %d %ld %p %p %p %p\n", debugstr_a(pObjectName), ObjectType,
|
2003-08-12 20:53:14 +02:00
|
|
|
SecurityInfo, psidOwner, psidGroup, pDacl, pSacl);
|
2004-08-10 00:55:47 +02:00
|
|
|
|
2020-04-28 05:35:31 +02:00
|
|
|
wstr = strdupAW(pObjectName);
|
2004-08-10 00:55:47 +02:00
|
|
|
r = SetNamedSecurityInfoW( wstr, ObjectType, SecurityInfo, psidOwner,
|
|
|
|
psidGroup, pDacl, pSacl );
|
|
|
|
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free( wstr );
|
2004-08-10 00:55:47 +02:00
|
|
|
|
|
|
|
return r;
|
2003-08-12 20:53:14 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* SetNamedSecurityInfoW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI SetNamedSecurityInfoW(LPWSTR pObjectName,
|
|
|
|
SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo,
|
|
|
|
PSID psidOwner, PSID psidGroup, PACL pDacl, PACL pSacl)
|
|
|
|
{
|
2012-11-26 20:08:57 +01:00
|
|
|
DWORD access = 0;
|
2013-01-18 18:59:01 +01:00
|
|
|
HANDLE handle;
|
|
|
|
DWORD err;
|
2012-11-26 20:08:57 +01:00
|
|
|
|
2022-02-07 23:10:27 +01:00
|
|
|
TRACE( "%s %d %ld %p %p %p %p\n", debugstr_w(pObjectName), ObjectType,
|
2003-08-12 20:53:14 +02:00
|
|
|
SecurityInfo, psidOwner, psidGroup, pDacl, pSacl);
|
2012-11-26 20:08:57 +01:00
|
|
|
|
|
|
|
if (!pObjectName) return ERROR_INVALID_PARAMETER;
|
|
|
|
|
|
|
|
if (SecurityInfo & (OWNER_SECURITY_INFORMATION|GROUP_SECURITY_INFORMATION))
|
|
|
|
access |= WRITE_OWNER;
|
|
|
|
if (SecurityInfo & DACL_SECURITY_INFORMATION)
|
|
|
|
access |= WRITE_DAC;
|
|
|
|
if (SecurityInfo & SACL_SECURITY_INFORMATION)
|
|
|
|
access |= ACCESS_SYSTEM_SECURITY;
|
|
|
|
|
2013-01-30 20:59:15 +01:00
|
|
|
switch (ObjectType)
|
|
|
|
{
|
|
|
|
case SE_SERVICE:
|
|
|
|
if (!(err = get_security_service( pObjectName, access, &handle )))
|
|
|
|
{
|
|
|
|
err = SetSecurityInfo( handle, ObjectType, SecurityInfo, psidOwner, psidGroup, pDacl, pSacl );
|
|
|
|
CloseServiceHandle( handle );
|
|
|
|
}
|
|
|
|
break;
|
2013-02-02 16:53:17 +01:00
|
|
|
case SE_REGISTRY_KEY:
|
|
|
|
if (!(err = get_security_regkey( pObjectName, access, &handle )))
|
|
|
|
{
|
|
|
|
err = SetSecurityInfo( handle, ObjectType, SecurityInfo, psidOwner, psidGroup, pDacl, pSacl );
|
|
|
|
RegCloseKey( handle );
|
|
|
|
}
|
|
|
|
break;
|
2013-01-30 20:59:15 +01:00
|
|
|
case SE_FILE_OBJECT:
|
2015-03-27 11:12:04 +01:00
|
|
|
if (SecurityInfo & DACL_SECURITY_INFORMATION)
|
|
|
|
access |= READ_CONTROL;
|
2013-01-30 20:59:15 +01:00
|
|
|
if (!(err = get_security_file( pObjectName, access, &handle )))
|
|
|
|
{
|
|
|
|
err = SetSecurityInfo( handle, ObjectType, SecurityInfo, psidOwner, psidGroup, pDacl, pSacl );
|
|
|
|
CloseHandle( handle );
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
FIXME( "Object type %d is not currently supported.\n", ObjectType );
|
|
|
|
return ERROR_SUCCESS;
|
|
|
|
}
|
2013-01-18 18:59:01 +01:00
|
|
|
return err;
|
2003-08-12 20:53:14 +02:00
|
|
|
}
|
2003-09-17 22:04:45 +02:00
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* GetExplicitEntriesFromAclA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI GetExplicitEntriesFromAclA( PACL pacl, PULONG pcCountOfExplicitEntries,
|
|
|
|
PEXPLICIT_ACCESSA* pListOfExplicitEntries)
|
|
|
|
{
|
|
|
|
FIXME("%p %p %p\n",pacl, pcCountOfExplicitEntries, pListOfExplicitEntries);
|
|
|
|
return ERROR_CALL_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* GetExplicitEntriesFromAclW [ADVAPI32.@]
|
|
|
|
*/
|
2017-11-10 22:50:31 +01:00
|
|
|
DWORD WINAPI GetExplicitEntriesFromAclW( PACL pacl, PULONG count, PEXPLICIT_ACCESSW *list )
|
2003-09-17 22:04:45 +02:00
|
|
|
{
|
2017-11-10 22:50:31 +01:00
|
|
|
ACL_SIZE_INFORMATION sizeinfo;
|
|
|
|
EXPLICIT_ACCESSW *entries;
|
|
|
|
MAX_SID *sid_entries;
|
|
|
|
ACE_HEADER *ace;
|
|
|
|
NTSTATUS status;
|
|
|
|
int i;
|
|
|
|
|
|
|
|
TRACE("%p %p %p\n",pacl, count, list);
|
|
|
|
|
|
|
|
if (!count || !list)
|
|
|
|
return ERROR_INVALID_PARAMETER;
|
|
|
|
|
|
|
|
status = RtlQueryInformationAcl(pacl, &sizeinfo, sizeof(sizeinfo), AclSizeInformation);
|
|
|
|
if (status) return RtlNtStatusToDosError(status);
|
|
|
|
|
|
|
|
if (!sizeinfo.AceCount)
|
|
|
|
{
|
|
|
|
*count = 0;
|
|
|
|
*list = NULL;
|
|
|
|
return ERROR_SUCCESS;
|
|
|
|
}
|
|
|
|
|
|
|
|
entries = LocalAlloc(LMEM_FIXED | LMEM_ZEROINIT, (sizeof(EXPLICIT_ACCESSW) + sizeof(MAX_SID)) * sizeinfo.AceCount);
|
|
|
|
if (!entries) return ERROR_OUTOFMEMORY;
|
|
|
|
sid_entries = (MAX_SID *)(entries + sizeinfo.AceCount);
|
|
|
|
|
|
|
|
for (i = 0; i < sizeinfo.AceCount; i++)
|
|
|
|
{
|
|
|
|
status = RtlGetAce(pacl, i, (void**)&ace);
|
|
|
|
if (status) goto error;
|
|
|
|
|
|
|
|
switch (ace->AceType)
|
|
|
|
{
|
|
|
|
case ACCESS_ALLOWED_ACE_TYPE:
|
|
|
|
{
|
|
|
|
ACCESS_ALLOWED_ACE *allow = (ACCESS_ALLOWED_ACE *)ace;
|
|
|
|
entries[i].grfAccessMode = GRANT_ACCESS;
|
|
|
|
entries[i].grfInheritance = ace->AceFlags;
|
|
|
|
entries[i].grfAccessPermissions = allow->Mask;
|
|
|
|
|
|
|
|
CopySid(sizeof(MAX_SID), (PSID)&sid_entries[i], (PSID)&allow->SidStart);
|
|
|
|
entries[i].Trustee.pMultipleTrustee = NULL;
|
|
|
|
entries[i].Trustee.MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
|
|
|
|
entries[i].Trustee.TrusteeForm = TRUSTEE_IS_SID;
|
|
|
|
entries[i].Trustee.TrusteeType = TRUSTEE_IS_UNKNOWN;
|
|
|
|
entries[i].Trustee.ptstrName = (WCHAR *)&sid_entries[i];
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
|
|
|
case ACCESS_DENIED_ACE_TYPE:
|
|
|
|
{
|
|
|
|
ACCESS_DENIED_ACE *deny = (ACCESS_DENIED_ACE *)ace;
|
|
|
|
entries[i].grfAccessMode = DENY_ACCESS;
|
|
|
|
entries[i].grfInheritance = ace->AceFlags;
|
|
|
|
entries[i].grfAccessPermissions = deny->Mask;
|
|
|
|
|
|
|
|
CopySid(sizeof(MAX_SID), (PSID)&sid_entries[i], (PSID)&deny->SidStart);
|
|
|
|
entries[i].Trustee.pMultipleTrustee = NULL;
|
|
|
|
entries[i].Trustee.MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
|
|
|
|
entries[i].Trustee.TrusteeForm = TRUSTEE_IS_SID;
|
|
|
|
entries[i].Trustee.TrusteeType = TRUSTEE_IS_UNKNOWN;
|
|
|
|
entries[i].Trustee.ptstrName = (WCHAR *)&sid_entries[i];
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
|
|
|
default:
|
|
|
|
FIXME("Unhandled ace type %d\n", ace->AceType);
|
|
|
|
entries[i].grfAccessMode = NOT_USED_ACCESS;
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
*count = sizeinfo.AceCount;
|
|
|
|
*list = entries;
|
|
|
|
return ERROR_SUCCESS;
|
|
|
|
|
|
|
|
error:
|
|
|
|
LocalFree(entries);
|
|
|
|
return RtlNtStatusToDosError(status);
|
2003-09-17 22:04:45 +02:00
|
|
|
}
|
2003-11-11 23:03:24 +01:00
|
|
|
|
2008-06-19 15:50:02 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* GetAuditedPermissionsFromAclA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI GetAuditedPermissionsFromAclA( PACL pacl, PTRUSTEEA pTrustee, PACCESS_MASK pSuccessfulAuditedRights,
|
|
|
|
PACCESS_MASK pFailedAuditRights)
|
|
|
|
{
|
|
|
|
FIXME("%p %p %p %p\n",pacl, pTrustee, pSuccessfulAuditedRights, pFailedAuditRights);
|
|
|
|
return ERROR_CALL_NOT_IMPLEMENTED;
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* GetAuditedPermissionsFromAclW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI GetAuditedPermissionsFromAclW( PACL pacl, PTRUSTEEW pTrustee, PACCESS_MASK pSuccessfulAuditedRights,
|
|
|
|
PACCESS_MASK pFailedAuditRights)
|
|
|
|
{
|
|
|
|
FIXME("%p %p %p %p\n",pacl, pTrustee, pSuccessfulAuditedRights, pFailedAuditRights);
|
|
|
|
return ERROR_CALL_NOT_IMPLEMENTED;
|
|
|
|
|
|
|
|
}
|
2003-11-11 23:03:24 +01:00
|
|
|
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
/******************************************************************************
|
|
|
|
* ConvertStringSecurityDescriptorToSecurityDescriptorA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI ConvertStringSecurityDescriptorToSecurityDescriptorA(
|
|
|
|
LPCSTR StringSecurityDescriptor,
|
|
|
|
DWORD StringSDRevision,
|
|
|
|
PSECURITY_DESCRIPTOR* SecurityDescriptor,
|
|
|
|
PULONG SecurityDescriptorSize)
|
|
|
|
{
|
2012-09-13 22:54:37 +02:00
|
|
|
BOOL ret;
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
LPWSTR StringSecurityDescriptorW;
|
|
|
|
|
2022-02-07 23:10:27 +01:00
|
|
|
TRACE("%s, %lu, %p, %p\n", debugstr_a(StringSecurityDescriptor), StringSDRevision,
|
2017-11-17 15:56:57 +01:00
|
|
|
SecurityDescriptor, SecurityDescriptorSize);
|
|
|
|
|
2012-09-13 22:54:37 +02:00
|
|
|
if(!StringSecurityDescriptor)
|
|
|
|
return FALSE;
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
|
2020-04-28 05:35:31 +02:00
|
|
|
StringSecurityDescriptorW = strdupAW(StringSecurityDescriptor);
|
2012-09-13 22:54:37 +02:00
|
|
|
ret = ConvertStringSecurityDescriptorToSecurityDescriptorW(StringSecurityDescriptorW,
|
|
|
|
StringSDRevision, SecurityDescriptor,
|
|
|
|
SecurityDescriptorSize);
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free(StringSecurityDescriptorW);
|
Stub implementations for AdjustTokenGroups, AreAllAccessesGranted,
CreatePrivateObjectSecurity, CreateProcessAsUser{A,W},
DestroyPrivateObjectSecurity, DuplicateToken{,Ex},
EnumDependentServices{A,W}, GetEffectiveRightsFromAcl{A,W},
ConvertStringSecurityDescriptorToSecurityDescriptorA. Implementations
for BuildExplicitAccessWithName{A,W},
BuildTrusteeWithObjectsAndName{A,W},
BuildTrusteeWithObjectsAndSid{A,W}.
Correct prototype for InitializeAcl, RtlCopySid and RtlGetAce.
Use the CallWin32ToNt macro only with functions that return an
NTSTATUS.
2004-12-21 17:16:10 +01:00
|
|
|
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
2007-09-25 22:12:50 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* ConvertSecurityDescriptorToStringSecurityDescriptorA [ADVAPI32.@]
|
|
|
|
*/
|
2007-10-14 14:36:21 +02:00
|
|
|
BOOL WINAPI ConvertSecurityDescriptorToStringSecurityDescriptorA(PSECURITY_DESCRIPTOR SecurityDescriptor, DWORD SDRevision, SECURITY_INFORMATION Information, LPSTR *OutputString, PULONG OutputLen)
|
2007-09-25 22:12:50 +02:00
|
|
|
{
|
|
|
|
LPWSTR wstr;
|
|
|
|
ULONG len;
|
|
|
|
if (ConvertSecurityDescriptorToStringSecurityDescriptorW(SecurityDescriptor, SDRevision, Information, &wstr, &len))
|
|
|
|
{
|
|
|
|
int lenA;
|
|
|
|
|
|
|
|
lenA = WideCharToMultiByte(CP_ACP, 0, wstr, len, NULL, 0, NULL, NULL);
|
2014-08-27 13:48:17 +02:00
|
|
|
*OutputString = heap_alloc(lenA);
|
2007-09-25 22:12:50 +02:00
|
|
|
WideCharToMultiByte(CP_ACP, 0, wstr, len, *OutputString, lenA, NULL, NULL);
|
|
|
|
LocalFree(wstr);
|
|
|
|
|
|
|
|
if (OutputLen != NULL)
|
|
|
|
*OutputLen = lenA;
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
*OutputString = NULL;
|
|
|
|
if (OutputLen)
|
|
|
|
*OutputLen = 0;
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2004-09-16 22:27:52 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* ConvertStringSidToSidA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI ConvertStringSidToSidA(LPCSTR StringSid, PSID* Sid)
|
|
|
|
{
|
|
|
|
BOOL bret = FALSE;
|
2003-11-11 23:03:24 +01:00
|
|
|
|
2004-09-16 22:27:52 +02:00
|
|
|
TRACE("%s, %p\n", debugstr_a(StringSid), Sid);
|
|
|
|
if (GetVersion() & 0x80000000)
|
|
|
|
SetLastError(ERROR_CALL_NOT_IMPLEMENTED);
|
|
|
|
else if (!StringSid || !Sid)
|
|
|
|
SetLastError(ERROR_INVALID_PARAMETER);
|
|
|
|
else
|
|
|
|
{
|
2020-04-28 05:35:31 +02:00
|
|
|
WCHAR *wStringSid = strdupAW(StringSid);
|
2004-09-16 22:27:52 +02:00
|
|
|
bret = ConvertStringSidToSidW(wStringSid, Sid);
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free(wStringSid);
|
2004-09-16 22:27:52 +02:00
|
|
|
}
|
2003-11-11 23:03:24 +01:00
|
|
|
return bret;
|
|
|
|
}
|
|
|
|
|
2004-08-09 20:47:06 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* ConvertSidToStringSidA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI ConvertSidToStringSidA(PSID pSid, LPSTR *pstr)
|
|
|
|
{
|
|
|
|
LPWSTR wstr = NULL;
|
|
|
|
LPSTR str;
|
|
|
|
UINT len;
|
|
|
|
|
|
|
|
TRACE("%p %p\n", pSid, pstr );
|
|
|
|
|
|
|
|
if( !ConvertSidToStringSidW( pSid, &wstr ) )
|
|
|
|
return FALSE;
|
|
|
|
|
|
|
|
len = WideCharToMultiByte( CP_ACP, 0, wstr, -1, NULL, 0, NULL, NULL );
|
|
|
|
str = LocalAlloc( 0, len );
|
|
|
|
WideCharToMultiByte( CP_ACP, 0, wstr, -1, str, len, NULL, NULL );
|
|
|
|
LocalFree( wstr );
|
|
|
|
|
|
|
|
*pstr = str;
|
|
|
|
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
2007-11-27 21:48:53 +01:00
|
|
|
/******************************************************************************
|
|
|
|
* CreateProcessWithLogonW
|
|
|
|
*/
|
|
|
|
BOOL WINAPI CreateProcessWithLogonW( LPCWSTR lpUsername, LPCWSTR lpDomain, LPCWSTR lpPassword, DWORD dwLogonFlags,
|
|
|
|
LPCWSTR lpApplicationName, LPWSTR lpCommandLine, DWORD dwCreationFlags, LPVOID lpEnvironment,
|
|
|
|
LPCWSTR lpCurrentDirectory, LPSTARTUPINFOW lpStartupInfo, LPPROCESS_INFORMATION lpProcessInformation )
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("%s %s %s 0x%08lx %s %s 0x%08lx %p %s %p %p stub\n", debugstr_w(lpUsername), debugstr_w(lpDomain),
|
2007-11-27 21:48:53 +01:00
|
|
|
debugstr_w(lpPassword), dwLogonFlags, debugstr_w(lpApplicationName),
|
|
|
|
debugstr_w(lpCommandLine), dwCreationFlags, lpEnvironment, debugstr_w(lpCurrentDirectory),
|
|
|
|
lpStartupInfo, lpProcessInformation);
|
|
|
|
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
|
2013-01-22 22:53:55 +01:00
|
|
|
BOOL WINAPI CreateProcessWithTokenW(HANDLE token, DWORD logon_flags, LPCWSTR application_name, LPWSTR command_line,
|
|
|
|
DWORD creation_flags, void *environment, LPCWSTR current_directory, STARTUPINFOW *startup_info,
|
|
|
|
PROCESS_INFORMATION *process_information )
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("%p 0x%08lx %s %s 0x%08lx %p %s %p %p - semi-stub\n", token,
|
2013-01-22 22:53:55 +01:00
|
|
|
logon_flags, debugstr_w(application_name), debugstr_w(command_line),
|
|
|
|
creation_flags, environment, debugstr_w(current_directory),
|
|
|
|
startup_info, process_information);
|
|
|
|
|
|
|
|
/* FIXME: check if handles should be inherited */
|
|
|
|
return CreateProcessW( application_name, command_line, NULL, NULL, FALSE, creation_flags, environment,
|
|
|
|
current_directory, startup_info, process_information );
|
|
|
|
}
|
|
|
|
|
2003-11-11 23:03:24 +01:00
|
|
|
/******************************************************************************
|
|
|
|
* GetNamedSecurityInfoA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI GetNamedSecurityInfoA(LPSTR pObjectName,
|
|
|
|
SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo,
|
|
|
|
PSID* ppsidOwner, PSID* ppsidGroup, PACL* ppDacl, PACL* ppSacl,
|
|
|
|
PSECURITY_DESCRIPTOR* ppSecurityDescriptor)
|
|
|
|
{
|
2012-09-13 22:54:37 +02:00
|
|
|
LPWSTR wstr;
|
2004-08-06 19:31:17 +02:00
|
|
|
DWORD r;
|
|
|
|
|
2022-02-07 23:10:27 +01:00
|
|
|
TRACE("%s %d %ld %p %p %p %p %p\n", pObjectName, ObjectType, SecurityInfo,
|
2003-11-11 23:03:24 +01:00
|
|
|
ppsidOwner, ppsidGroup, ppDacl, ppSacl, ppSecurityDescriptor);
|
2004-08-06 19:31:17 +02:00
|
|
|
|
2020-04-28 05:35:31 +02:00
|
|
|
wstr = strdupAW(pObjectName);
|
2004-08-06 19:31:17 +02:00
|
|
|
r = GetNamedSecurityInfoW( wstr, ObjectType, SecurityInfo, ppsidOwner,
|
|
|
|
ppsidGroup, ppDacl, ppSacl, ppSecurityDescriptor );
|
|
|
|
|
2014-08-27 13:48:17 +02:00
|
|
|
heap_free( wstr );
|
2004-08-06 19:31:17 +02:00
|
|
|
|
|
|
|
return r;
|
2003-11-11 23:03:24 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* GetNamedSecurityInfoW [ADVAPI32.@]
|
|
|
|
*/
|
2005-04-11 16:25:41 +02:00
|
|
|
DWORD WINAPI GetNamedSecurityInfoW( LPWSTR name, SE_OBJECT_TYPE type,
|
|
|
|
SECURITY_INFORMATION info, PSID* owner, PSID* group, PACL* dacl,
|
|
|
|
PACL* sacl, PSECURITY_DESCRIPTOR* descriptor )
|
2003-11-11 23:03:24 +01:00
|
|
|
{
|
2012-11-26 20:13:47 +01:00
|
|
|
DWORD access = 0;
|
2013-01-18 18:59:01 +01:00
|
|
|
HANDLE handle;
|
|
|
|
DWORD err;
|
2005-04-11 16:25:41 +02:00
|
|
|
|
2022-02-07 23:10:27 +01:00
|
|
|
TRACE( "%s %d %ld %p %p %p %p %p\n", debugstr_w(name), type, info, owner,
|
2005-04-11 16:25:41 +02:00
|
|
|
group, dacl, sacl, descriptor );
|
|
|
|
|
2010-08-24 11:04:35 +02:00
|
|
|
/* A NULL descriptor is allowed if any one of the other pointers is not NULL */
|
|
|
|
if (!name || !(owner||group||dacl||sacl||descriptor) ) return ERROR_INVALID_PARAMETER;
|
2005-04-11 16:25:41 +02:00
|
|
|
|
2010-08-24 11:04:35 +02:00
|
|
|
/* If no descriptor, we have to check that there's a pointer for the requested information */
|
|
|
|
if( !descriptor && (
|
|
|
|
((info & OWNER_SECURITY_INFORMATION) && !owner)
|
|
|
|
|| ((info & GROUP_SECURITY_INFORMATION) && !group)
|
|
|
|
|| ((info & DACL_SECURITY_INFORMATION) && !dacl)
|
|
|
|
|| ((info & SACL_SECURITY_INFORMATION) && !sacl) ))
|
|
|
|
return ERROR_INVALID_PARAMETER;
|
|
|
|
|
2012-11-26 20:13:47 +01:00
|
|
|
if (info & (OWNER_SECURITY_INFORMATION|GROUP_SECURITY_INFORMATION|DACL_SECURITY_INFORMATION))
|
|
|
|
access |= READ_CONTROL;
|
2007-06-25 16:00:38 +02:00
|
|
|
if (info & SACL_SECURITY_INFORMATION)
|
2012-11-26 20:13:47 +01:00
|
|
|
access |= ACCESS_SYSTEM_SECURITY;
|
2010-08-24 11:04:35 +02:00
|
|
|
|
2013-01-30 20:59:12 +01:00
|
|
|
switch (type)
|
|
|
|
{
|
|
|
|
case SE_SERVICE:
|
2013-02-02 16:52:04 +01:00
|
|
|
if (!(err = get_security_service( name, access, &handle )))
|
2013-01-30 20:59:12 +01:00
|
|
|
{
|
|
|
|
err = GetSecurityInfo( handle, type, info, owner, group, dacl, sacl, descriptor );
|
|
|
|
CloseServiceHandle( handle );
|
|
|
|
}
|
|
|
|
break;
|
2013-02-02 16:52:04 +01:00
|
|
|
case SE_REGISTRY_KEY:
|
|
|
|
if (!(err = get_security_regkey( name, access, &handle )))
|
|
|
|
{
|
|
|
|
err = GetSecurityInfo( handle, type, info, owner, group, dacl, sacl, descriptor );
|
|
|
|
RegCloseKey( handle );
|
|
|
|
}
|
|
|
|
break;
|
2013-01-30 20:59:12 +01:00
|
|
|
case SE_FILE_OBJECT:
|
2013-02-02 16:52:04 +01:00
|
|
|
if (!(err = get_security_file( name, access, &handle )))
|
2013-01-30 20:59:12 +01:00
|
|
|
{
|
|
|
|
err = GetSecurityInfo( handle, type, info, owner, group, dacl, sacl, descriptor );
|
|
|
|
CloseHandle( handle );
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
FIXME( "Object type %d is not currently supported.\n", type );
|
|
|
|
if (owner) *owner = NULL;
|
|
|
|
if (group) *group = NULL;
|
|
|
|
if (dacl) *dacl = NULL;
|
|
|
|
if (sacl) *sacl = NULL;
|
|
|
|
if (descriptor) *descriptor = NULL;
|
|
|
|
return ERROR_SUCCESS;
|
|
|
|
}
|
2013-01-18 18:59:01 +01:00
|
|
|
return err;
|
2003-11-11 23:03:24 +01:00
|
|
|
}
|
2004-12-06 17:17:08 +01:00
|
|
|
|
2011-05-18 14:15:19 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* GetNamedSecurityInfoExW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI GetNamedSecurityInfoExW( LPCWSTR object, SE_OBJECT_TYPE type,
|
|
|
|
SECURITY_INFORMATION info, LPCWSTR provider, LPCWSTR property,
|
|
|
|
PACTRL_ACCESSW* access_list, PACTRL_AUDITW* audit_list, LPWSTR* owner, LPWSTR* group )
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("(%s, %d, %ld, %s, %s, %p, %p, %p, %p) stub\n", debugstr_w(object), type, info,
|
2011-05-18 14:15:19 +02:00
|
|
|
debugstr_w(provider), debugstr_w(property), access_list, audit_list, owner, group);
|
|
|
|
return ERROR_CALL_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* GetNamedSecurityInfoExA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI GetNamedSecurityInfoExA( LPCSTR object, SE_OBJECT_TYPE type,
|
|
|
|
SECURITY_INFORMATION info, LPCSTR provider, LPCSTR property,
|
|
|
|
PACTRL_ACCESSA* access_list, PACTRL_AUDITA* audit_list, LPSTR* owner, LPSTR* group )
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("(%s, %d, %ld, %s, %s, %p, %p, %p, %p) stub\n", debugstr_a(object), type, info,
|
2011-05-18 14:15:19 +02:00
|
|
|
debugstr_a(provider), debugstr_a(property), access_list, audit_list, owner, group);
|
|
|
|
return ERROR_CALL_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
2004-12-06 17:17:08 +01:00
|
|
|
/******************************************************************************
|
|
|
|
* DecryptFileW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI DecryptFileW(LPCWSTR lpFileName, DWORD dwReserved)
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("(%s, %08lx): stub\n", debugstr_w(lpFileName), dwReserved);
|
2004-12-06 17:17:08 +01:00
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* DecryptFileA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI DecryptFileA(LPCSTR lpFileName, DWORD dwReserved)
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("(%s, %08lx): stub\n", debugstr_a(lpFileName), dwReserved);
|
2004-12-06 17:17:08 +01:00
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* EncryptFileW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI EncryptFileW(LPCWSTR lpFileName)
|
|
|
|
{
|
2013-04-17 23:40:46 +02:00
|
|
|
FIXME("(%s): stub\n", debugstr_w(lpFileName));
|
2004-12-06 17:17:08 +01:00
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* EncryptFileA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI EncryptFileA(LPCSTR lpFileName)
|
|
|
|
{
|
2013-04-17 23:40:46 +02:00
|
|
|
FIXME("(%s): stub\n", debugstr_a(lpFileName));
|
2004-12-06 17:17:08 +01:00
|
|
|
return TRUE;
|
|
|
|
}
|
2005-03-07 12:00:24 +01:00
|
|
|
|
2006-05-19 15:19:18 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* FileEncryptionStatusW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI FileEncryptionStatusW(LPCWSTR lpFileName, LPDWORD lpStatus)
|
|
|
|
{
|
|
|
|
FIXME("(%s %p): stub\n", debugstr_w(lpFileName), lpStatus);
|
|
|
|
if (!lpStatus)
|
|
|
|
return FALSE;
|
|
|
|
*lpStatus = FILE_SYSTEM_NOT_SUPPORT;
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* FileEncryptionStatusA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI FileEncryptionStatusA(LPCSTR lpFileName, LPDWORD lpStatus)
|
|
|
|
{
|
|
|
|
FIXME("(%s %p): stub\n", debugstr_a(lpFileName), lpStatus);
|
|
|
|
if (!lpStatus)
|
|
|
|
return FALSE;
|
|
|
|
*lpStatus = FILE_SYSTEM_NOT_SUPPORT;
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
2019-04-25 11:36:14 +02:00
|
|
|
static NTSTATUS combine_dacls(ACL *parent, ACL *child, ACL **result)
|
|
|
|
{
|
2019-04-25 11:36:15 +02:00
|
|
|
NTSTATUS status;
|
2019-04-25 11:36:14 +02:00
|
|
|
ACL *combined;
|
|
|
|
int i;
|
|
|
|
|
|
|
|
/* initialize a combined DACL containing both inherited and new ACEs */
|
|
|
|
combined = heap_alloc_zero(child->AclSize+parent->AclSize);
|
|
|
|
if (!combined)
|
|
|
|
return STATUS_NO_MEMORY;
|
|
|
|
|
2019-04-25 11:36:15 +02:00
|
|
|
status = RtlCreateAcl(combined, parent->AclSize+child->AclSize, ACL_REVISION);
|
|
|
|
if (status != STATUS_SUCCESS)
|
|
|
|
{
|
|
|
|
heap_free(combined);
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* copy the new ACEs */
|
|
|
|
for (i=0; i<child->AceCount; i++)
|
|
|
|
{
|
|
|
|
ACE_HEADER *ace;
|
|
|
|
|
|
|
|
if (!GetAce(child, i, (void*)&ace))
|
|
|
|
continue;
|
|
|
|
if (!AddAce(combined, ACL_REVISION, MAXDWORD, ace, ace->AceSize))
|
|
|
|
WARN("error adding new ACE\n");
|
|
|
|
}
|
2019-04-25 11:36:14 +02:00
|
|
|
|
|
|
|
/* copy the inherited ACEs */
|
|
|
|
for (i=0; i<parent->AceCount; i++)
|
|
|
|
{
|
|
|
|
ACE_HEADER *ace;
|
|
|
|
|
|
|
|
if (!GetAce(parent, i, (void*)&ace))
|
|
|
|
continue;
|
|
|
|
if (!(ace->AceFlags & (OBJECT_INHERIT_ACE|CONTAINER_INHERIT_ACE)))
|
|
|
|
continue;
|
|
|
|
if ((ace->AceFlags & (OBJECT_INHERIT_ACE|CONTAINER_INHERIT_ACE)) !=
|
|
|
|
(OBJECT_INHERIT_ACE|CONTAINER_INHERIT_ACE))
|
|
|
|
{
|
|
|
|
FIXME("unsupported flags: %x\n", ace->AceFlags);
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (ace->AceFlags & NO_PROPAGATE_INHERIT_ACE)
|
|
|
|
ace->AceFlags &= ~(OBJECT_INHERIT_ACE|CONTAINER_INHERIT_ACE|NO_PROPAGATE_INHERIT_ACE);
|
|
|
|
ace->AceFlags &= ~INHERIT_ONLY_ACE;
|
|
|
|
ace->AceFlags |= INHERITED_ACE;
|
|
|
|
|
|
|
|
if (!AddAce(combined, ACL_REVISION, MAXDWORD, ace, ace->AceSize))
|
|
|
|
WARN("error adding inherited ACE\n");
|
|
|
|
}
|
|
|
|
|
|
|
|
*result = combined;
|
|
|
|
return STATUS_SUCCESS;
|
|
|
|
}
|
|
|
|
|
2005-03-07 12:00:24 +01:00
|
|
|
/******************************************************************************
|
|
|
|
* SetSecurityInfo [ADVAPI32.@]
|
|
|
|
*/
|
2005-03-21 11:32:45 +01:00
|
|
|
DWORD WINAPI SetSecurityInfo(HANDLE handle, SE_OBJECT_TYPE ObjectType,
|
2005-03-07 12:00:24 +01:00
|
|
|
SECURITY_INFORMATION SecurityInfo, PSID psidOwner,
|
2012-11-15 18:16:23 +01:00
|
|
|
PSID psidGroup, PACL pDacl, PACL pSacl)
|
|
|
|
{
|
|
|
|
SECURITY_DESCRIPTOR sd;
|
2015-03-27 11:12:04 +01:00
|
|
|
PACL dacl = pDacl;
|
2012-11-15 18:16:23 +01:00
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
if (!InitializeSecurityDescriptor(&sd, SECURITY_DESCRIPTOR_REVISION))
|
|
|
|
return ERROR_INVALID_SECURITY_DESCR;
|
|
|
|
|
|
|
|
if (SecurityInfo & OWNER_SECURITY_INFORMATION)
|
|
|
|
SetSecurityDescriptorOwner(&sd, psidOwner, FALSE);
|
|
|
|
if (SecurityInfo & GROUP_SECURITY_INFORMATION)
|
|
|
|
SetSecurityDescriptorGroup(&sd, psidGroup, FALSE);
|
|
|
|
if (SecurityInfo & DACL_SECURITY_INFORMATION)
|
2015-03-27 11:12:04 +01:00
|
|
|
{
|
2015-04-03 10:04:03 +02:00
|
|
|
if (ObjectType == SE_FILE_OBJECT && pDacl)
|
2015-03-27 11:12:04 +01:00
|
|
|
{
|
|
|
|
SECURITY_DESCRIPTOR_CONTROL control;
|
|
|
|
PSECURITY_DESCRIPTOR psd;
|
|
|
|
OBJECT_NAME_INFORMATION *name_info;
|
|
|
|
DWORD size, rev;
|
|
|
|
|
|
|
|
status = NtQuerySecurityObject(handle, SecurityInfo, NULL, 0, &size);
|
|
|
|
if (status != STATUS_BUFFER_TOO_SMALL)
|
|
|
|
return RtlNtStatusToDosError(status);
|
|
|
|
|
|
|
|
psd = heap_alloc(size);
|
|
|
|
if (!psd)
|
|
|
|
return ERROR_NOT_ENOUGH_MEMORY;
|
|
|
|
|
|
|
|
status = NtQuerySecurityObject(handle, SecurityInfo, psd, size, &size);
|
|
|
|
if (status)
|
|
|
|
{
|
|
|
|
heap_free(psd);
|
|
|
|
return RtlNtStatusToDosError(status);
|
|
|
|
}
|
|
|
|
|
|
|
|
status = RtlGetControlSecurityDescriptor(psd, &control, &rev);
|
|
|
|
heap_free(psd);
|
|
|
|
if (status)
|
|
|
|
return RtlNtStatusToDosError(status);
|
|
|
|
/* TODO: copy some control flags to new sd */
|
|
|
|
|
|
|
|
/* inherit parent directory DACL */
|
|
|
|
if (!(control & SE_DACL_PROTECTED))
|
|
|
|
{
|
|
|
|
status = NtQueryObject(handle, ObjectNameInformation, NULL, 0, &size);
|
|
|
|
if (status != STATUS_INFO_LENGTH_MISMATCH)
|
|
|
|
return RtlNtStatusToDosError(status);
|
|
|
|
|
|
|
|
name_info = heap_alloc(size);
|
|
|
|
if (!name_info)
|
|
|
|
return ERROR_NOT_ENOUGH_MEMORY;
|
|
|
|
|
|
|
|
status = NtQueryObject(handle, ObjectNameInformation, name_info, size, NULL);
|
|
|
|
if (status)
|
|
|
|
{
|
|
|
|
heap_free(name_info);
|
|
|
|
return RtlNtStatusToDosError(status);
|
|
|
|
}
|
|
|
|
|
|
|
|
for (name_info->Name.Length-=2; name_info->Name.Length>0; name_info->Name.Length-=2)
|
|
|
|
if (name_info->Name.Buffer[name_info->Name.Length/2-1]=='\\' ||
|
|
|
|
name_info->Name.Buffer[name_info->Name.Length/2-1]=='/')
|
|
|
|
break;
|
|
|
|
if (name_info->Name.Length)
|
|
|
|
{
|
|
|
|
OBJECT_ATTRIBUTES attr;
|
|
|
|
IO_STATUS_BLOCK io;
|
|
|
|
HANDLE parent;
|
|
|
|
PSECURITY_DESCRIPTOR parent_sd;
|
|
|
|
ACL *parent_dacl;
|
|
|
|
DWORD err = ERROR_ACCESS_DENIED;
|
|
|
|
|
|
|
|
name_info->Name.Buffer[name_info->Name.Length/2] = 0;
|
|
|
|
|
|
|
|
attr.Length = sizeof(attr);
|
|
|
|
attr.RootDirectory = 0;
|
|
|
|
attr.Attributes = 0;
|
|
|
|
attr.ObjectName = &name_info->Name;
|
|
|
|
attr.SecurityDescriptor = NULL;
|
2015-10-30 12:53:59 +01:00
|
|
|
status = NtOpenFile(&parent, READ_CONTROL|SYNCHRONIZE, &attr, &io,
|
2015-03-27 11:12:04 +01:00
|
|
|
FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE,
|
|
|
|
FILE_OPEN_FOR_BACKUP_INTENT);
|
|
|
|
heap_free(name_info);
|
|
|
|
if (!status)
|
|
|
|
{
|
|
|
|
err = GetSecurityInfo(parent, SE_FILE_OBJECT, DACL_SECURITY_INFORMATION,
|
|
|
|
NULL, NULL, &parent_dacl, NULL, &parent_sd);
|
|
|
|
CloseHandle(parent);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (!err)
|
|
|
|
{
|
2019-04-25 11:36:14 +02:00
|
|
|
status = combine_dacls(parent_dacl, pDacl, &dacl);
|
2015-03-27 11:12:04 +01:00
|
|
|
LocalFree(parent_sd);
|
2019-04-25 11:36:14 +02:00
|
|
|
if (status != STATUS_SUCCESS)
|
|
|
|
return RtlNtStatusToDosError(status);
|
2015-03-27 11:12:04 +01:00
|
|
|
}
|
|
|
|
}
|
|
|
|
else
|
|
|
|
heap_free(name_info);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
SetSecurityDescriptorDacl(&sd, TRUE, dacl, FALSE);
|
|
|
|
}
|
2012-11-15 18:16:23 +01:00
|
|
|
if (SecurityInfo & SACL_SECURITY_INFORMATION)
|
|
|
|
SetSecurityDescriptorSacl(&sd, TRUE, pSacl, FALSE);
|
|
|
|
|
2013-01-18 18:58:48 +01:00
|
|
|
switch (ObjectType)
|
|
|
|
{
|
|
|
|
case SE_SERVICE:
|
|
|
|
FIXME("stub: Service objects are not supported at this time.\n");
|
|
|
|
status = STATUS_SUCCESS; /* Implement SetServiceObjectSecurity */
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
status = NtSetSecurityObject(handle, SecurityInfo, &sd);
|
|
|
|
break;
|
|
|
|
}
|
2015-03-27 11:12:04 +01:00
|
|
|
if (dacl != pDacl)
|
|
|
|
heap_free(dacl);
|
2012-11-15 18:16:23 +01:00
|
|
|
return RtlNtStatusToDosError(status);
|
2005-03-07 12:00:24 +01:00
|
|
|
}
|
2009-01-15 07:30:11 +01:00
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* SaferCreateLevel [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI SaferCreateLevel(DWORD ScopeId, DWORD LevelId, DWORD OpenFlags,
|
|
|
|
SAFER_LEVEL_HANDLE* LevelHandle, LPVOID lpReserved)
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("(%lu, %lx, %lu, %p, %p) stub\n", ScopeId, LevelId, OpenFlags, LevelHandle, lpReserved);
|
2010-07-20 14:50:37 +02:00
|
|
|
|
|
|
|
*LevelHandle = (SAFER_LEVEL_HANDLE)0xdeadbeef;
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* SaferComputeTokenFromLevel [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI SaferComputeTokenFromLevel(SAFER_LEVEL_HANDLE handle, HANDLE token, PHANDLE access_token,
|
|
|
|
DWORD flags, LPVOID reserved)
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("(%p, %p, %p, %lx, %p) stub\n", handle, token, access_token, flags, reserved);
|
2010-07-20 14:50:37 +02:00
|
|
|
|
2019-05-28 09:34:10 +02:00
|
|
|
*access_token = (flags & SAFER_TOKEN_NULL_IF_EQUAL) ? NULL : (HANDLE)0xdeadbeef;
|
2010-07-20 14:50:37 +02:00
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* SaferCloseLevel [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI SaferCloseLevel(SAFER_LEVEL_HANDLE handle)
|
|
|
|
{
|
|
|
|
FIXME("(%p) stub\n", handle);
|
|
|
|
return TRUE;
|
2009-01-15 07:30:11 +01:00
|
|
|
}
|
2009-03-25 13:24:13 +01:00
|
|
|
|
2017-02-13 22:54:44 +01:00
|
|
|
/******************************************************************************
|
|
|
|
* TreeResetNamedSecurityInfoW [ADVAPI32.@]
|
|
|
|
*/
|
2009-03-25 13:24:13 +01:00
|
|
|
DWORD WINAPI TreeResetNamedSecurityInfoW( LPWSTR pObjectName,
|
|
|
|
SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo,
|
|
|
|
PSID pOwner, PSID pGroup, PACL pDacl, PACL pSacl,
|
|
|
|
BOOL KeepExplicit, FN_PROGRESS fnProgress,
|
|
|
|
PROG_INVOKE_SETTING ProgressInvokeSetting, PVOID Args)
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("(%s, %i, %li, %p, %p, %p, %p, %i, %p, %i, %p) stub\n",
|
2009-03-25 13:24:13 +01:00
|
|
|
debugstr_w(pObjectName), ObjectType, SecurityInfo, pOwner, pGroup,
|
|
|
|
pDacl, pSacl, KeepExplicit, fnProgress, ProgressInvokeSetting, Args);
|
|
|
|
|
|
|
|
return ERROR_SUCCESS;
|
|
|
|
}
|
2009-08-11 20:09:58 +02:00
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* SaferGetPolicyInformation [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI SaferGetPolicyInformation(DWORD scope, SAFER_POLICY_INFO_CLASS class, DWORD size,
|
|
|
|
PVOID buffer, PDWORD required, LPVOID lpReserved)
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("(%lu %u %lu %p %p %p) stub\n", scope, class, size, buffer, required, lpReserved);
|
2009-08-11 20:09:58 +02:00
|
|
|
return FALSE;
|
|
|
|
}
|
2011-04-01 18:29:24 +02:00
|
|
|
|
2019-03-06 10:14:27 +01:00
|
|
|
/******************************************************************************
|
|
|
|
* SaferIdentifyLevel [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI SaferIdentifyLevel(DWORD count, SAFER_CODE_PROPERTIES *properties, SAFER_LEVEL_HANDLE *handle,
|
|
|
|
void *reserved)
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("(%lu %p %p %p) stub\n", count, properties, handle, reserved);
|
2019-03-06 10:14:27 +01:00
|
|
|
*handle = (SAFER_LEVEL_HANDLE)0xdeadbeef;
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
2011-04-01 18:29:24 +02:00
|
|
|
/******************************************************************************
|
|
|
|
* SaferSetLevelInformation [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
BOOL WINAPI SaferSetLevelInformation(SAFER_LEVEL_HANDLE handle, SAFER_OBJECT_INFO_CLASS infotype,
|
|
|
|
LPVOID buffer, DWORD size)
|
|
|
|
{
|
2022-02-07 23:10:27 +01:00
|
|
|
FIXME("(%p %u %p %lu) stub\n", handle, infotype, buffer, size);
|
2011-04-01 18:29:24 +02:00
|
|
|
return FALSE;
|
|
|
|
}
|
2017-02-16 21:17:30 +01:00
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* LookupSecurityDescriptorPartsA [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI LookupSecurityDescriptorPartsA(TRUSTEEA *owner, TRUSTEEA *group, ULONG *access_count,
|
|
|
|
EXPLICIT_ACCESSA *access_list, ULONG *audit_count,
|
|
|
|
EXPLICIT_ACCESSA *audit_list, SECURITY_DESCRIPTOR *descriptor)
|
|
|
|
{
|
|
|
|
FIXME("(%p %p %p %p %p %p %p) stub\n", owner, group, access_count,
|
|
|
|
access_list, audit_count, audit_list, descriptor);
|
|
|
|
return ERROR_CALL_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
* LookupSecurityDescriptorPartsW [ADVAPI32.@]
|
|
|
|
*/
|
|
|
|
DWORD WINAPI LookupSecurityDescriptorPartsW(TRUSTEEW *owner, TRUSTEEW *group, ULONG *access_count,
|
|
|
|
EXPLICIT_ACCESSW *access_list, ULONG *audit_count,
|
|
|
|
EXPLICIT_ACCESSW *audit_list, SECURITY_DESCRIPTOR *descriptor)
|
|
|
|
{
|
|
|
|
FIXME("(%p %p %p %p %p %p %p) stub\n", owner, group, access_count,
|
|
|
|
access_list, audit_count, audit_list, descriptor);
|
|
|
|
return ERROR_CALL_NOT_IMPLEMENTED;
|
|
|
|
}
|