Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2024-07-03 03:04:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Implement Access State support (SeCreate/DeleteAccessState and SeSetAccessStateGenericMapping. Based on a patch by Javier M. Mellid

Browse source 
svn path=/trunk/; revision=15190
This commit is contained in:
Alex Ionescu 2005-05-09 19:57:41 +00:00
parent 786ed0c605
commit 1f40540008
3 changed files with 92 additions and 22 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
reactos/include/ddk/sefuncs.h
View file

@ -122,7 +122,7 @@ NTSTATUS
STDCALL STDCALL
SeCreateAccessState( SeCreateAccessState(
PACCESS_STATE AccessState, PACCESS_STATE AccessState,
PVOID AuxData, PAUX_DATA AuxData,
ACCESS_MASK Access, ACCESS_MASK Access,
PGENERIC_MAPPING GenericMapping PGENERIC_MAPPING GenericMapping
); );

8
reactos/include/ddk/setypes.h
View file

@ -97,6 +97,7 @@ typedef struct _SEP_AUDIT_POLICY {
}; };
} SEP_AUDIT_POLICY, *PSEP_AUDIT_POLICY; } SEP_AUDIT_POLICY, *PSEP_AUDIT_POLICY;
#define TOKEN_HAS_TRAVERSE_PRIVILEGE 0x01
typedef struct _TOKEN { typedef struct _TOKEN {
TOKEN_SOURCE TokenSource; /* 0x00 */ TOKEN_SOURCE TokenSource; /* 0x00 */
LUID TokenId; /* 0x10 */ LUID TokenId; /* 0x10 */
@ -222,6 +223,13 @@ typedef enum _SECURITY_OPERATION_CODE
AssignSecurityDescriptor AssignSecurityDescriptor
} SECURITY_OPERATION_CODE, *PSECURITY_OPERATION_CODE; } SECURITY_OPERATION_CODE, *PSECURITY_OPERATION_CODE;
typedef struct _AUX_DATA
{
PPRIVILEGE_SET PrivilegeSet;
GENERIC_MAPPING GenericMapping;
ULONG Reserved;
} AUX_DATA, *PAUX_DATA;
typedef struct _ACCESS_STATE typedef struct _ACCESS_STATE
{ {
LUID OperationID; LUID OperationID;

104
reactos/ntoskrnl/se/access.c
View file

@ -4,7 +4,8 @@
* FILE: ntoskrnl/se/access.c * FILE: ntoskrnl/se/access.c
* PURPOSE: Access state functions * PURPOSE: Access state functions
* *
* PROGRAMMERS: Eric Kohl * PROGRAMMERS: Alex Ionescu (alex@relsoft.net) -
* Based on patch by Javier M. Mellid
*/ */
/* INCLUDES *****************************************************************/ /* INCLUDES *****************************************************************/
@ -13,47 +14,108 @@
#define NDEBUG #define NDEBUG
#include <internal/debug.h> #include <internal/debug.h>
#define GENERIC_ACCESS (GENERIC_READ | GENERIC_WRITE | GENERIC_EXECUTE | \
GENERIC_ALL)
/* FUNCTIONS ***************************************************************/ /* FUNCTIONS ***************************************************************/
/* /*
* @unimplemented * @implemented
*/ */
NTSTATUS NTSTATUS
STDCALL STDCALL
SeCreateAccessState( SeCreateAccessState(PACCESS_STATE AccessState,
PACCESS_STATE AccessState, PAUX_DATA AuxData,
PVOID AuxData, ACCESS_MASK Access,
ACCESS_MASK Access, PGENERIC_MAPPING GenericMapping)
PGENERIC_MAPPING GenericMapping
)
{ {
UNIMPLEMENTED; ACCESS_MASK AccessMask = Access;
return STATUS_NOT_IMPLEMENTED; PTOKEN Token;
PAGED_CODE();
/* Map the Generic Acess to Specific Access if we have a Mapping */
if ((Access & GENERIC_ACCESS) && (GenericMapping))
{
RtlMapGenericMask(&AccessMask, GenericMapping);
}
/* Initialize the Access State */
RtlZeroMemory(AccessState, sizeof(ACCESS_STATE));
/* Capture the Subject Context */
SeCaptureSubjectContext(&AccessState->SubjectSecurityContext);
/* Set Access State Data */
AccessState->AuxData = AuxData;
AccessState->RemainingDesiredAccess = AccessMask;
AccessState->OriginallyDesiredAccess = AccessMask;
ExpAllocateLocallyUniqueId(&AccessState->OperationID);
/* Get the Token to use */
Token = AccessState->SubjectSecurityContext.ClientToken ?
(PTOKEN)&AccessState->SubjectSecurityContext.ClientToken :
(PTOKEN)&AccessState->SubjectSecurityContext.PrimaryToken;
/* Check for Travers Privilege */
if (Token->TokenFlags & TOKEN_HAS_TRAVERSE_PRIVILEGE)
{
/* Preserve the Traverse Privilege */
AccessState->Flags = TOKEN_HAS_TRAVERSE_PRIVILEGE;
}
/* Set the Auxiliary Data */
AuxData->PrivilegeSet = (PPRIVILEGE_SET)((ULONG_PTR)AccessState +
FIELD_OFFSET(ACCESS_STATE,
Privileges));
if (GenericMapping) AuxData->GenericMapping = *GenericMapping;
/* Return Sucess */
return STATUS_SUCCESS;
} }
/* /*
* @unimplemented * @implemented
*/ */
VOID VOID
STDCALL STDCALL
SeDeleteAccessState( SeDeleteAccessState(IN PACCESS_STATE AccessState)
IN PACCESS_STATE AccessState
)
{ {
UNIMPLEMENTED; PAUX_DATA AuxData;
PAGED_CODE();
/* Get the Auxiliary Data */
AuxData = AccessState->AuxData;
/* Deallocate Privileges */
if (AccessState->PrivilegesAllocated) ExFreePool(AuxData->PrivilegeSet);
/* Deallocate Name and Type Name */
if (AccessState->ObjectName.Buffer)
{
ExFreePool(AccessState->ObjectName.Buffer);
}
if (AccessState->ObjectTypeName.Buffer)
{
ExFreePool(AccessState->ObjectTypeName.Buffer);
}
/* Release the Subject Context */
SeReleaseSubjectContext(&AccessState->SubjectSecurityContext);
} }
/* /*
* @unimplemented * @implemented
*/ */
VOID VOID
STDCALL STDCALL
SeSetAccessStateGenericMapping( SeSetAccessStateGenericMapping(PACCESS_STATE AccessState,
PACCESS_STATE AccessState, PGENERIC_MAPPING GenericMapping)
PGENERIC_MAPPING GenericMapping
)
{ {
UNIMPLEMENTED; PAGED_CODE();
/* Set the Generic Mapping */
((PAUX_DATA)AccessState->AuxData)->GenericMapping = *GenericMapping;
} }
/* EOF */ /* EOF */