Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2025-08-05 22:52:54 +00:00
Code Issues Projects Releases Packages Wiki Activity

Use SeAssignSecurity() to build a security descriptor for a new object.

Browse source 
svn path=/trunk/; revision=10196
This commit is contained in:
Eric Kohl 2004-07-18 13:03:43 +00:00
parent 04642b4ea7
commit 4962573e85
1 changed files with 33 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

56
reactos/ntoskrnl/ob/object.c
View file

@ -1,4 +1,4 @@
/* $Id: object.c,v 1.78 2004/07/16 17:19:15 ekohl Exp $ /* $Id: object.c,v 1.79 2004/07/18 13:03:43 ekohl Exp $
* *
* COPYRIGHT: See COPYING in the top level directory * COPYRIGHT: See COPYING in the top level directory
* PROJECT: ReactOS kernel * PROJECT: ReactOS kernel
@ -347,12 +347,19 @@ ObCreateObject (IN KPROCESSOR_MODE ObjectAttributesAccessMode OPTIONAL,
NTSTATUS Status; NTSTATUS Status;
BOOLEAN ObjectAttached = FALSE; BOOLEAN ObjectAttached = FALSE;
PWCHAR NamePtr; PWCHAR NamePtr;
PSECURITY_DESCRIPTOR NewSecurityDescriptor = NULL;
assert_irql(APC_LEVEL); assert_irql(APC_LEVEL);
DPRINT("ObCreateObject(Type %p ObjectAttributes %p, Object %p)\n", DPRINT("ObCreateObject(Type %p ObjectAttributes %p, Object %p)\n",
Type, ObjectAttributes, Object); Type, ObjectAttributes, Object);
if (Type == NULL)
{
DPRINT1("Invalid object type!\n");
return STATUS_INVALID_PARAMETER;
}
if (ObjectAttributes != NULL && if (ObjectAttributes != NULL &&
ObjectAttributes->ObjectName != NULL && ObjectAttributes->ObjectName != NULL &&
ObjectAttributes->ObjectName->Buffer != NULL) ObjectAttributes->ObjectName->Buffer != NULL)
@ -425,8 +432,7 @@ ObCreateObject (IN KPROCESSOR_MODE ObjectAttributesAccessMode OPTIONAL,
ObjectAttached = TRUE; ObjectAttached = TRUE;
} }
if ((Header->ObjectType != NULL) && if (Header->ObjectType->Create != NULL)
(Header->ObjectType->Create != NULL))
{ {
DPRINT("Calling %x\n", Header->ObjectType->Create); DPRINT("Calling %x\n", Header->ObjectType->Create);
Status = Header->ObjectType->Create(HEADER_TO_BODY(Header), Status = Header->ObjectType->Create(HEADER_TO_BODY(Header),
@ -449,11 +455,19 @@ ObCreateObject (IN KPROCESSOR_MODE ObjectAttributesAccessMode OPTIONAL,
return(Status); return(Status);
} }
} }
RtlFreeUnicodeString( &RemainingPath ); RtlFreeUnicodeString(&RemainingPath);
if (Header->ObjectType != NULL) /* Build the new security descriptor */
Status = SeAssignSecurity((ParentHeader != NULL) ? ParentHeader->SecurityDescriptor : NULL,
(ObjectAttributes != NULL) ? ObjectAttributes->SecurityDescriptor : NULL,
&NewSecurityDescriptor,
(Header->ObjectType == ObDirectoryType),
NULL, //SubjectContext,
Header->ObjectType->Mapping,
PagedPool);
if (NT_SUCCESS(Status))
{ {
/* FIXME: Call SeAssignSecurity() to create a new security descriptor */ DPRINT("NewSecurityDescriptor %p\n", NewSecurityDescriptor);
if (Header->ObjectType->Security != NULL) if (Header->ObjectType->Security != NULL)
{ {
@ -463,16 +477,13 @@ ObCreateObject (IN KPROCESSOR_MODE ObjectAttributesAccessMode OPTIONAL,
else else
{ {
/* Assign the security descriptor to the object header */ /* Assign the security descriptor to the object header */
if (ObjectAttributes != NULL && ObjectAttributes->SecurityDescriptor != NULL) Status = ObpAddSecurityDescriptor(NewSecurityDescriptor,
{ &Header->SecurityDescriptor);
Status = ObpAddSecurityDescriptor(ObjectAttributes->SecurityDescriptor, DPRINT("Object security descriptor %p\n", Header->SecurityDescriptor);
&Header->SecurityDescriptor);
}
else
{
Status = STATUS_SUCCESS;
}
} }
/* Release the new security descriptor */
SeDeassignSecurity(&NewSecurityDescriptor);
} }
if (Object != NULL) if (Object != NULL)
@ -484,14 +495,6 @@ ObCreateObject (IN KPROCESSOR_MODE ObjectAttributesAccessMode OPTIONAL,
} }
/*
* @implemented
*/
NTSTATUS STDCALL
ObReferenceObjectByPointer(IN PVOID Object,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_TYPE ObjectType,
IN KPROCESSOR_MODE AccessMode)
/* /*
* FUNCTION: Increments the pointer reference count for a given object * FUNCTION: Increments the pointer reference count for a given object
* ARGUMENTS: * ARGUMENTS:
@ -500,7 +503,14 @@ ObReferenceObjectByPointer(IN PVOID Object,
* ObjectType = Points to the object type structure * ObjectType = Points to the object type structure
* AccessMode = Type of access check to perform * AccessMode = Type of access check to perform
* RETURNS: Status * RETURNS: Status
*
* @implemented
*/ */
NTSTATUS STDCALL
ObReferenceObjectByPointer(IN PVOID Object,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_TYPE ObjectType,
IN KPROCESSOR_MODE AccessMode)
{ {
POBJECT_HEADER Header; POBJECT_HEADER Header;