Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2024-12-28 10:04:49 +00:00
Code Issues Projects Releases Packages Wiki Activity

Cleanup, add display of token values being passed into ZwCreateToken() as well as display of values coming out of the token.

Browse source 
(Patch by Joseph Galbraith)

svn path=/trunk/; revision=3092
This commit is contained in:
Eric Kohl 2002-06-15 10:13:35 +00:00
parent 6017a8515d
commit 5e1123c888
1 changed files with 26 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

40
reactos/apps/tests/tokentest/tokentest.c
View file

@ -249,21 +249,30 @@ DisplayDacl(PACL pAcl)
UNICODE_STRING scSid; UNICODE_STRING scSid;
ROS_ACE_HEADER* pAce; ROS_ACE_HEADER* pAce;
LPWSTR wszType = 0; LPWSTR wszType = 0;
PSID pSid;
status = RtlGetAce(pAcl, i, (ROS_ACE**) &pAce); status = RtlGetAce(pAcl, i, (ROS_ACE**) &pAce);
if ( ! NT_SUCCESS(status) )
{
printf("RtlGetAce(): status = 0x%08x\n", status);
break;
}
pSid = (PSID) (pAce + 1);
if ( pAce->AceType == ACCESS_ALLOWED_ACE_TYPE ) if ( pAce->AceType == ACCESS_ALLOWED_ACE_TYPE )
wszType = L"allow"; wszType = L"allow";
if ( pAce->AceType == ACCESS_DENIED_ACE_TYPE ) if ( pAce->AceType == ACCESS_DENIED_ACE_TYPE )
wszType = L"deny "; wszType = L"deny ";
RtlConvertSidToUnicodeString(&scSid, (PSID) (pAce + 1), TRUE); status = RtlConvertSidToUnicodeString(&scSid, pSid, TRUE);
printf("%S %wZ 0x%08x\n", wszType, &scSid, pAce->AccessMask); if ( ! NT_SUCCESS(status) )
LocalFree(scSid.Buffer); {
} printf("RtlConvertSidToUnicodeString(): status = 0x%08x\n", status);
break;
}
{ printf("%d.) %S %wZ 0x%08x\n", i, wszType, &scSid, pAce->AccessMask);
ROS_ACE_HEADER* pAce; LocalFree(scSid.Buffer);
status = RtlGetAce(pAcl, pAcl->AceCount, (ROS_ACE**) &pAce);
} }
} }
@ -406,8 +415,8 @@ CreateInitialSystemToken(HANDLE* phSystemToken)
ptkGroups = (TOKEN_GROUPS*) malloc(uSize); ptkGroups = (TOKEN_GROUPS*) malloc(uSize);
ptkGroups->GroupCount = nGroupCount; ptkGroups->GroupCount = nGroupCount;
ptkGroups->Groups[0].Sid = &sidAdministrators; ptkGroups->Groups[0].Sid = (SID*) &sidAdministrators;
ptkGroups->Groups[0].Attributes = SE_GROUP_ENABLED|SE_GROUP_ENABLED_BY_DEFAULT|SE_GROUP_MANDATORY; ptkGroups->Groups[0].Attributes = SE_GROUP_ENABLED;
ptkGroups->Groups[1].Sid = &sidEveryone; ptkGroups->Groups[1].Sid = &sidEveryone;
ptkGroups->Groups[1].Attributes = SE_GROUP_ENABLED|SE_GROUP_ENABLED_BY_DEFAULT|SE_GROUP_MANDATORY; ptkGroups->Groups[1].Attributes = SE_GROUP_ENABLED|SE_GROUP_ENABLED_BY_DEFAULT|SE_GROUP_MANDATORY;
@ -431,9 +440,8 @@ CreateInitialSystemToken(HANDLE* phSystemToken)
uSize += sizeof(ACE_HEADER) + sizeof(sidSystem); uSize += sizeof(ACE_HEADER) + sizeof(sidSystem);
uSize += sizeof(ACE_HEADER) + sizeof(sidAdministrators); uSize += sizeof(ACE_HEADER) + sizeof(sidAdministrators);
uSize = (uSize & (~3)) + 8; uSize = (uSize & (~3)) + 8;
tkDefaultDacl.DefaultDacl = malloc(uSize); tkDefaultDacl.DefaultDacl = (PACL) malloc(uSize);
printf("RtlCreateAcl(0x%08x, %d, %d)\n", tkDefaultDacl.DefaultDacl, uSize, ACL_REVISION);
status = RtlCreateAcl(tkDefaultDacl.DefaultDacl, uSize, ACL_REVISION); status = RtlCreateAcl(tkDefaultDacl.DefaultDacl, uSize, ACL_REVISION);
if ( ! NT_SUCCESS(status) ) if ( ! NT_SUCCESS(status) )
printf("RtlCreateAcl() failed: 0x%08x\n", status); printf("RtlCreateAcl() failed: 0x%08x\n", status);
@ -442,10 +450,14 @@ CreateInitialSystemToken(HANDLE* phSystemToken)
if ( ! NT_SUCCESS(status) ) if ( ! NT_SUCCESS(status) )
printf("RtlAddAccessAllowedAce() failed: 0x%08x\n", status); printf("RtlAddAccessAllowedAce() failed: 0x%08x\n", status);
status = RtlAddAccessAllowedAce(tkDefaultDacl.DefaultDacl, ACL_REVISION, GENERIC_READ|GENERIC_EXECUTE|READ_CONTROL, &sidAdministrators); status = RtlAddAccessAllowedAce(tkDefaultDacl.DefaultDacl, ACL_REVISION, GENERIC_READ|GENERIC_EXECUTE|READ_CONTROL, (PSID) &sidAdministrators);
if ( ! NT_SUCCESS(status) ) if ( ! NT_SUCCESS(status) )
printf("RtlAddAccessAllowedAce() failed: 0x%08x\n", status); printf("RtlAddAccessAllowedAce() failed: 0x%08x\n", status);
printf("Parameters being passed into ZwCreateToken:\n\n");
DisplayTokenSids(&tkUser, ptkGroups, &tkDefaultOwner, &tkPrimaryGroup);
DisplayDacl(tkDefaultDacl.DefaultDacl);
printf("Calling ZwCreateToken()...\n"); printf("Calling ZwCreateToken()...\n");
status = ZwCreateToken(phSystemToken, status = ZwCreateToken(phSystemToken,
TOKEN_ALL_ACCESS, TOKEN_ALL_ACCESS,
@ -492,7 +504,7 @@ main(int argc, char** argv[])
// Now do the other one // Now do the other one
status = CreateInitialSystemToken(&hSystemToken); status = CreateInitialSystemToken(&hSystemToken);
if ( status == 0 ) if ( NT_SUCCESS(status) )
{ {
printf("System Token: 0x%08x\n", hSystemToken); printf("System Token: 0x%08x\n", hSystemToken);
DisplayToken(hSystemToken); DisplayToken(hSystemToken);