mirror of
https://github.com/reactos/reactos.git
synced 2024-09-19 17:21:14 +00:00
782 lines
24 KiB
C
782 lines
24 KiB
C
/*
|
|
* COPYRIGHT: See COPYING in the top level directory
|
|
* PROJECT: ReactOS system libraries
|
|
* FILE: lib/advapi32/misc/logon.c
|
|
* PURPOSE: Logon functions
|
|
* PROGRAMMER: Eric Kohl
|
|
*/
|
|
|
|
#include <advapi32.h>
|
|
WINE_DEFAULT_DEBUG_CHANNEL(advapi);
|
|
|
|
|
|
/* FUNCTIONS ***************************************************************/
|
|
|
|
/*
|
|
* @implemented
|
|
*/
|
|
BOOL WINAPI
|
|
CreateProcessAsUserA(HANDLE hToken,
|
|
LPCSTR lpApplicationName,
|
|
LPSTR lpCommandLine,
|
|
LPSECURITY_ATTRIBUTES lpProcessAttributes,
|
|
LPSECURITY_ATTRIBUTES lpThreadAttributes,
|
|
BOOL bInheritHandles,
|
|
DWORD dwCreationFlags,
|
|
LPVOID lpEnvironment,
|
|
LPCSTR lpCurrentDirectory,
|
|
LPSTARTUPINFOA lpStartupInfo,
|
|
LPPROCESS_INFORMATION lpProcessInformation)
|
|
{
|
|
PROCESS_ACCESS_TOKEN AccessToken;
|
|
NTSTATUS Status;
|
|
|
|
/* Create the process with a suspended main thread */
|
|
if (!CreateProcessA(lpApplicationName,
|
|
lpCommandLine,
|
|
lpProcessAttributes,
|
|
lpThreadAttributes,
|
|
bInheritHandles,
|
|
dwCreationFlags | CREATE_SUSPENDED,
|
|
lpEnvironment,
|
|
lpCurrentDirectory,
|
|
lpStartupInfo,
|
|
lpProcessInformation))
|
|
{
|
|
return FALSE;
|
|
}
|
|
|
|
AccessToken.Token = hToken;
|
|
AccessToken.Thread = NULL;
|
|
|
|
/* Set the new process token */
|
|
Status = NtSetInformationProcess(lpProcessInformation->hProcess,
|
|
ProcessAccessToken,
|
|
(PVOID)&AccessToken,
|
|
sizeof(AccessToken));
|
|
if (!NT_SUCCESS (Status))
|
|
{
|
|
SetLastError(RtlNtStatusToDosError(Status));
|
|
return FALSE;
|
|
}
|
|
|
|
/* Resume the main thread */
|
|
if (!(dwCreationFlags & CREATE_SUSPENDED))
|
|
{
|
|
ResumeThread(lpProcessInformation->hThread);
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
|
|
/*
|
|
* @implemented
|
|
*/
|
|
BOOL WINAPI
|
|
CreateProcessAsUserW(HANDLE hToken,
|
|
LPCWSTR lpApplicationName,
|
|
LPWSTR lpCommandLine,
|
|
LPSECURITY_ATTRIBUTES lpProcessAttributes,
|
|
LPSECURITY_ATTRIBUTES lpThreadAttributes,
|
|
BOOL bInheritHandles,
|
|
DWORD dwCreationFlags,
|
|
LPVOID lpEnvironment,
|
|
LPCWSTR lpCurrentDirectory,
|
|
LPSTARTUPINFOW lpStartupInfo,
|
|
LPPROCESS_INFORMATION lpProcessInformation)
|
|
{
|
|
PROCESS_ACCESS_TOKEN AccessToken;
|
|
NTSTATUS Status;
|
|
|
|
/* Create the process with a suspended main thread */
|
|
if (!CreateProcessW(lpApplicationName,
|
|
lpCommandLine,
|
|
lpProcessAttributes,
|
|
lpThreadAttributes,
|
|
bInheritHandles,
|
|
dwCreationFlags | CREATE_SUSPENDED,
|
|
lpEnvironment,
|
|
lpCurrentDirectory,
|
|
lpStartupInfo,
|
|
lpProcessInformation))
|
|
{
|
|
return FALSE;
|
|
}
|
|
|
|
AccessToken.Token = hToken;
|
|
AccessToken.Thread = NULL;
|
|
|
|
/* Set the new process token */
|
|
Status = NtSetInformationProcess(lpProcessInformation->hProcess,
|
|
ProcessAccessToken,
|
|
(PVOID)&AccessToken,
|
|
sizeof(AccessToken));
|
|
if (!NT_SUCCESS (Status))
|
|
{
|
|
SetLastError(RtlNtStatusToDosError(Status));
|
|
return FALSE;
|
|
}
|
|
|
|
/* Resume the main thread */
|
|
if (!(dwCreationFlags & CREATE_SUSPENDED))
|
|
{
|
|
ResumeThread(lpProcessInformation->hThread);
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/*
|
|
* @unimplemented
|
|
*/
|
|
BOOL WINAPI
|
|
CreateProcessWithLogonW(LPCWSTR lpUsername,
|
|
LPCWSTR lpDomain,
|
|
LPCWSTR lpPassword,
|
|
DWORD dwLogonFlags,
|
|
LPCWSTR lpApplicationName,
|
|
LPWSTR lpCommandLine,
|
|
DWORD dwCreationFlags,
|
|
LPVOID lpEnvironment,
|
|
LPCWSTR lpCurrentDirectory,
|
|
LPSTARTUPINFOW lpStartupInfo,
|
|
LPPROCESS_INFORMATION lpProcessInformation)
|
|
{
|
|
FIXME("%s %s %s 0x%08x %s %s 0x%08x %p %s %p %p stub\n", debugstr_w(lpUsername), debugstr_w(lpDomain),
|
|
debugstr_w(lpPassword), dwLogonFlags, debugstr_w(lpApplicationName),
|
|
debugstr_w(lpCommandLine), dwCreationFlags, lpEnvironment, debugstr_w(lpCurrentDirectory),
|
|
lpStartupInfo, lpProcessInformation);
|
|
|
|
return FALSE;
|
|
}
|
|
|
|
/*
|
|
* @implemented
|
|
*/
|
|
BOOL WINAPI
|
|
LogonUserA(LPSTR lpszUsername,
|
|
LPSTR lpszDomain,
|
|
LPSTR lpszPassword,
|
|
DWORD dwLogonType,
|
|
DWORD dwLogonProvider,
|
|
PHANDLE phToken)
|
|
{
|
|
UNICODE_STRING UserName;
|
|
UNICODE_STRING Domain;
|
|
UNICODE_STRING Password;
|
|
BOOL ret = FALSE;
|
|
|
|
UserName.Buffer = NULL;
|
|
Domain.Buffer = NULL;
|
|
Password.Buffer = NULL;
|
|
|
|
if (!RtlCreateUnicodeStringFromAsciiz(&UserName, lpszUsername))
|
|
{
|
|
SetLastError(ERROR_NOT_ENOUGH_MEMORY);
|
|
goto UsernameDone;
|
|
}
|
|
|
|
if (!RtlCreateUnicodeStringFromAsciiz(&Domain, lpszDomain))
|
|
{
|
|
SetLastError(ERROR_NOT_ENOUGH_MEMORY);
|
|
goto DomainDone;
|
|
}
|
|
|
|
if (!RtlCreateUnicodeStringFromAsciiz(&Password, lpszPassword))
|
|
{
|
|
SetLastError(ERROR_NOT_ENOUGH_MEMORY);
|
|
goto PasswordDone;
|
|
}
|
|
|
|
ret = LogonUserW(UserName.Buffer,
|
|
Domain.Buffer,
|
|
Password.Buffer,
|
|
dwLogonType,
|
|
dwLogonProvider,
|
|
phToken);
|
|
|
|
if (Password.Buffer != NULL)
|
|
RtlFreeUnicodeString(&Password);
|
|
|
|
PasswordDone:
|
|
if (Domain.Buffer != NULL)
|
|
RtlFreeUnicodeString(&Domain);
|
|
|
|
DomainDone:
|
|
if (UserName.Buffer != NULL)
|
|
RtlFreeUnicodeString(&UserName);
|
|
|
|
UsernameDone:
|
|
return ret;
|
|
}
|
|
|
|
|
|
static BOOL WINAPI
|
|
GetAccountDomainSid(PSID *Sid)
|
|
{
|
|
PPOLICY_ACCOUNT_DOMAIN_INFO Info = NULL;
|
|
LSA_OBJECT_ATTRIBUTES ObjectAttributes;
|
|
LSA_HANDLE PolicyHandle;
|
|
PSID lpSid;
|
|
ULONG Length;
|
|
NTSTATUS Status;
|
|
|
|
*Sid = NULL;
|
|
|
|
memset(&ObjectAttributes, 0, sizeof(LSA_OBJECT_ATTRIBUTES));
|
|
ObjectAttributes.Length = sizeof(LSA_OBJECT_ATTRIBUTES);
|
|
|
|
Status = LsaOpenPolicy(NULL,
|
|
&ObjectAttributes,
|
|
POLICY_VIEW_LOCAL_INFORMATION,
|
|
&PolicyHandle);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
ERR("LsaOpenPolicy failed (Status: 0x%08lx)\n", Status);
|
|
return FALSE;
|
|
}
|
|
|
|
Status = LsaQueryInformationPolicy(PolicyHandle,
|
|
PolicyAccountDomainInformation,
|
|
(PVOID *)&Info);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
ERR("LsaQueryInformationPolicy failed (Status: 0x%08lx)\n", Status);
|
|
LsaClose(PolicyHandle);
|
|
return FALSE;
|
|
}
|
|
|
|
Length = RtlLengthSid(Info->DomainSid);
|
|
|
|
lpSid = RtlAllocateHeap(RtlGetProcessHeap(),
|
|
0,
|
|
Length);
|
|
if (lpSid == NULL)
|
|
{
|
|
ERR("Failed to allocate SID buffer!\n");
|
|
LsaFreeMemory(Info);
|
|
LsaClose(PolicyHandle);
|
|
return FALSE;
|
|
}
|
|
|
|
memcpy(lpSid, Info->DomainSid, Length);
|
|
|
|
*Sid = lpSid;
|
|
|
|
LsaFreeMemory(Info);
|
|
LsaClose(PolicyHandle);
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
|
|
static PSID
|
|
AppendRidToSid(PSID SrcSid,
|
|
ULONG Rid)
|
|
{
|
|
ULONG Rids[8] = {0, 0, 0, 0, 0, 0, 0, 0};
|
|
UCHAR RidCount;
|
|
PSID DstSid;
|
|
ULONG i;
|
|
|
|
RidCount = *RtlSubAuthorityCountSid(SrcSid);
|
|
if (RidCount >= 8)
|
|
return NULL;
|
|
|
|
for (i = 0; i < RidCount; i++)
|
|
Rids[i] = *RtlSubAuthoritySid(SrcSid, i);
|
|
|
|
Rids[RidCount] = Rid;
|
|
RidCount++;
|
|
|
|
RtlAllocateAndInitializeSid(RtlIdentifierAuthoritySid(SrcSid),
|
|
RidCount,
|
|
Rids[0],
|
|
Rids[1],
|
|
Rids[2],
|
|
Rids[3],
|
|
Rids[4],
|
|
Rids[5],
|
|
Rids[6],
|
|
Rids[7],
|
|
&DstSid);
|
|
|
|
return DstSid;
|
|
}
|
|
|
|
|
|
static BOOL WINAPI
|
|
GetUserSid(LPCWSTR UserName,
|
|
PSID *Sid)
|
|
{
|
|
PSID SidBuffer = NULL;
|
|
PWSTR DomainBuffer = NULL;
|
|
DWORD cbSidSize = 0;
|
|
DWORD cchDomSize = 0;
|
|
SID_NAME_USE Use;
|
|
BOOL res = TRUE;
|
|
|
|
*Sid = NULL;
|
|
|
|
LookupAccountNameW(NULL,
|
|
UserName,
|
|
NULL,
|
|
&cbSidSize,
|
|
NULL,
|
|
&cchDomSize,
|
|
&Use);
|
|
|
|
if (cbSidSize == 0 || cchDomSize == 0)
|
|
return FALSE;
|
|
|
|
SidBuffer = RtlAllocateHeap(RtlGetProcessHeap(),
|
|
HEAP_ZERO_MEMORY,
|
|
cbSidSize);
|
|
if (SidBuffer == NULL)
|
|
return FALSE;
|
|
|
|
DomainBuffer = RtlAllocateHeap(RtlGetProcessHeap(),
|
|
HEAP_ZERO_MEMORY,
|
|
cchDomSize * sizeof(WCHAR));
|
|
if (DomainBuffer == NULL)
|
|
{
|
|
res = FALSE;
|
|
goto done;
|
|
}
|
|
|
|
if (!LookupAccountNameW(NULL,
|
|
UserName,
|
|
SidBuffer,
|
|
&cbSidSize,
|
|
DomainBuffer,
|
|
&cchDomSize,
|
|
&Use))
|
|
{
|
|
res = FALSE;
|
|
goto done;
|
|
}
|
|
|
|
if (Use != SidTypeUser)
|
|
{
|
|
res = FALSE;
|
|
goto done;
|
|
}
|
|
|
|
*Sid = SidBuffer;
|
|
|
|
done:
|
|
if (DomainBuffer != NULL)
|
|
RtlFreeHeap(RtlGetProcessHeap(), 0, DomainBuffer);
|
|
|
|
if (res == FALSE)
|
|
{
|
|
if (SidBuffer != NULL)
|
|
RtlFreeHeap(RtlGetProcessHeap(), 0, SidBuffer);
|
|
}
|
|
|
|
return res;
|
|
}
|
|
|
|
|
|
static PTOKEN_GROUPS
|
|
AllocateGroupSids(OUT PSID *PrimaryGroupSid,
|
|
OUT PSID *OwnerSid)
|
|
{
|
|
SID_IDENTIFIER_AUTHORITY WorldAuthority = {SECURITY_WORLD_SID_AUTHORITY};
|
|
SID_IDENTIFIER_AUTHORITY LocalAuthority = {SECURITY_LOCAL_SID_AUTHORITY};
|
|
SID_IDENTIFIER_AUTHORITY SystemAuthority = {SECURITY_NT_AUTHORITY};
|
|
PTOKEN_GROUPS TokenGroups;
|
|
#define MAX_GROUPS 8
|
|
DWORD GroupCount = 0;
|
|
PSID DomainSid;
|
|
PSID Sid;
|
|
LUID Luid;
|
|
NTSTATUS Status;
|
|
|
|
Status = NtAllocateLocallyUniqueId(&Luid);
|
|
if (!NT_SUCCESS(Status))
|
|
return NULL;
|
|
|
|
if (!GetAccountDomainSid(&DomainSid))
|
|
return NULL;
|
|
|
|
TokenGroups = RtlAllocateHeap(
|
|
GetProcessHeap(), 0,
|
|
sizeof(TOKEN_GROUPS) +
|
|
MAX_GROUPS * sizeof(SID_AND_ATTRIBUTES));
|
|
if (TokenGroups == NULL)
|
|
{
|
|
RtlFreeHeap(RtlGetProcessHeap(), 0, DomainSid);
|
|
return NULL;
|
|
}
|
|
|
|
Sid = AppendRidToSid(DomainSid, DOMAIN_GROUP_RID_USERS);
|
|
RtlFreeHeap(RtlGetProcessHeap(), 0, DomainSid);
|
|
|
|
/* Member of the domain */
|
|
TokenGroups->Groups[GroupCount].Sid = Sid;
|
|
TokenGroups->Groups[GroupCount].Attributes =
|
|
SE_GROUP_ENABLED | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_MANDATORY;
|
|
*PrimaryGroupSid = Sid;
|
|
GroupCount++;
|
|
|
|
/* Member of 'Everyone' */
|
|
RtlAllocateAndInitializeSid(&WorldAuthority,
|
|
1,
|
|
SECURITY_WORLD_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
&Sid);
|
|
TokenGroups->Groups[GroupCount].Sid = Sid;
|
|
TokenGroups->Groups[GroupCount].Attributes =
|
|
SE_GROUP_ENABLED | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_MANDATORY;
|
|
GroupCount++;
|
|
|
|
#if 1
|
|
/* Member of 'Administrators' */
|
|
RtlAllocateAndInitializeSid(&SystemAuthority,
|
|
2,
|
|
SECURITY_BUILTIN_DOMAIN_RID,
|
|
DOMAIN_ALIAS_RID_ADMINS,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
&Sid);
|
|
TokenGroups->Groups[GroupCount].Sid = Sid;
|
|
TokenGroups->Groups[GroupCount].Attributes =
|
|
SE_GROUP_ENABLED | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_MANDATORY;
|
|
GroupCount++;
|
|
#else
|
|
TRACE("Not adding user to Administrators group\n");
|
|
#endif
|
|
|
|
/* Member of 'Users' */
|
|
RtlAllocateAndInitializeSid(&SystemAuthority,
|
|
2,
|
|
SECURITY_BUILTIN_DOMAIN_RID,
|
|
DOMAIN_ALIAS_RID_USERS,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
&Sid);
|
|
TokenGroups->Groups[GroupCount].Sid = Sid;
|
|
TokenGroups->Groups[GroupCount].Attributes =
|
|
SE_GROUP_ENABLED | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_MANDATORY;
|
|
GroupCount++;
|
|
|
|
/* Logon SID */
|
|
RtlAllocateAndInitializeSid(&SystemAuthority,
|
|
SECURITY_LOGON_IDS_RID_COUNT,
|
|
SECURITY_LOGON_IDS_RID,
|
|
Luid.HighPart,
|
|
Luid.LowPart,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
&Sid);
|
|
TokenGroups->Groups[GroupCount].Sid = Sid;
|
|
TokenGroups->Groups[GroupCount].Attributes =
|
|
SE_GROUP_ENABLED | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_MANDATORY | SE_GROUP_LOGON_ID;
|
|
GroupCount++;
|
|
*OwnerSid = Sid;
|
|
|
|
/* Member of 'Local users */
|
|
RtlAllocateAndInitializeSid(&LocalAuthority,
|
|
1,
|
|
SECURITY_LOCAL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
&Sid);
|
|
TokenGroups->Groups[GroupCount].Sid = Sid;
|
|
TokenGroups->Groups[GroupCount].Attributes =
|
|
SE_GROUP_ENABLED | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_MANDATORY;
|
|
GroupCount++;
|
|
|
|
/* Member of 'Interactive users' */
|
|
RtlAllocateAndInitializeSid(&SystemAuthority,
|
|
1,
|
|
SECURITY_INTERACTIVE_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
&Sid);
|
|
TokenGroups->Groups[GroupCount].Sid = Sid;
|
|
TokenGroups->Groups[GroupCount].Attributes =
|
|
SE_GROUP_ENABLED | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_MANDATORY;
|
|
GroupCount++;
|
|
|
|
/* Member of 'Authenticated users' */
|
|
RtlAllocateAndInitializeSid(&SystemAuthority,
|
|
1,
|
|
SECURITY_AUTHENTICATED_USER_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
&Sid);
|
|
TokenGroups->Groups[GroupCount].Sid = Sid;
|
|
TokenGroups->Groups[GroupCount].Attributes =
|
|
SE_GROUP_ENABLED | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_MANDATORY;
|
|
GroupCount++;
|
|
|
|
TokenGroups->GroupCount = GroupCount;
|
|
ASSERT(TokenGroups->GroupCount <= MAX_GROUPS);
|
|
|
|
return TokenGroups;
|
|
}
|
|
|
|
|
|
static VOID
|
|
FreeGroupSids(PTOKEN_GROUPS TokenGroups)
|
|
{
|
|
ULONG i;
|
|
|
|
for (i = 0; i < TokenGroups->GroupCount; i++)
|
|
{
|
|
if (TokenGroups->Groups[i].Sid != NULL)
|
|
RtlFreeHeap(GetProcessHeap(), 0, TokenGroups->Groups[i].Sid);
|
|
}
|
|
|
|
RtlFreeHeap(GetProcessHeap(), 0, TokenGroups);
|
|
}
|
|
|
|
|
|
/*
|
|
* @unimplemented
|
|
*/
|
|
BOOL WINAPI
|
|
LogonUserW(LPWSTR lpszUsername,
|
|
LPWSTR lpszDomain,
|
|
LPWSTR lpszPassword,
|
|
DWORD dwLogonType,
|
|
DWORD dwLogonProvider,
|
|
PHANDLE phToken)
|
|
{
|
|
/* FIXME shouldn't use hard-coded list of privileges */
|
|
static struct
|
|
{
|
|
LPCWSTR PrivName;
|
|
DWORD Attributes;
|
|
}
|
|
DefaultPrivs[] =
|
|
{
|
|
{ L"SeMachineAccountPrivilege", 0 },
|
|
{ L"SeSecurityPrivilege", 0 },
|
|
{ L"SeTakeOwnershipPrivilege", 0 },
|
|
{ L"SeLoadDriverPrivilege", 0 },
|
|
{ L"SeSystemProfilePrivilege", 0 },
|
|
{ L"SeSystemtimePrivilege", 0 },
|
|
{ L"SeProfileSingleProcessPrivilege", 0 },
|
|
{ L"SeIncreaseBasePriorityPrivilege", 0 },
|
|
{ L"SeCreatePagefilePrivilege", 0 },
|
|
{ L"SeBackupPrivilege", 0 },
|
|
{ L"SeRestorePrivilege", 0 },
|
|
{ L"SeShutdownPrivilege", 0 },
|
|
{ L"SeDebugPrivilege", 0 },
|
|
{ L"SeSystemEnvironmentPrivilege", 0 },
|
|
{ L"SeChangeNotifyPrivilege", SE_PRIVILEGE_ENABLED | SE_PRIVILEGE_ENABLED_BY_DEFAULT },
|
|
{ L"SeRemoteShutdownPrivilege", 0 },
|
|
{ L"SeUndockPrivilege", 0 },
|
|
{ L"SeEnableDelegationPrivilege", 0 },
|
|
{ L"SeImpersonatePrivilege", SE_PRIVILEGE_ENABLED | SE_PRIVILEGE_ENABLED_BY_DEFAULT },
|
|
{ L"SeCreateGlobalPrivilege", SE_PRIVILEGE_ENABLED | SE_PRIVILEGE_ENABLED_BY_DEFAULT }
|
|
};
|
|
OBJECT_ATTRIBUTES ObjectAttributes;
|
|
SECURITY_QUALITY_OF_SERVICE Qos;
|
|
TOKEN_USER TokenUser;
|
|
TOKEN_OWNER TokenOwner;
|
|
TOKEN_PRIMARY_GROUP TokenPrimaryGroup;
|
|
PTOKEN_GROUPS TokenGroups = NULL;
|
|
PTOKEN_PRIVILEGES TokenPrivileges = NULL;
|
|
TOKEN_DEFAULT_DACL TokenDefaultDacl;
|
|
LARGE_INTEGER ExpirationTime;
|
|
LUID AuthenticationId;
|
|
TOKEN_SOURCE TokenSource;
|
|
PSID UserSid = NULL;
|
|
PSID PrimaryGroupSid = NULL;
|
|
PSID OwnerSid = NULL;
|
|
PSID LocalSystemSid;
|
|
PACL Dacl = NULL;
|
|
SID_IDENTIFIER_AUTHORITY SystemAuthority = {SECURITY_NT_AUTHORITY};
|
|
unsigned i;
|
|
NTSTATUS Status = STATUS_SUCCESS;
|
|
|
|
Qos.Length = sizeof(SECURITY_QUALITY_OF_SERVICE);
|
|
Qos.ImpersonationLevel = SecurityAnonymous;
|
|
Qos.ContextTrackingMode = SECURITY_STATIC_TRACKING;
|
|
Qos.EffectiveOnly = FALSE;
|
|
|
|
ObjectAttributes.Length = sizeof(OBJECT_ATTRIBUTES);
|
|
ObjectAttributes.RootDirectory = NULL;
|
|
ObjectAttributes.ObjectName = NULL;
|
|
ObjectAttributes.Attributes = 0;
|
|
ObjectAttributes.SecurityDescriptor = NULL;
|
|
ObjectAttributes.SecurityQualityOfService = &Qos;
|
|
|
|
Status = NtAllocateLocallyUniqueId(&AuthenticationId);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
return FALSE;
|
|
}
|
|
|
|
ExpirationTime.QuadPart = -1;
|
|
|
|
/* Get the user SID from the registry */
|
|
if (!GetUserSid (lpszUsername, &UserSid))
|
|
{
|
|
ERR("GetUserSid() failed\n");
|
|
return FALSE;
|
|
}
|
|
|
|
TokenUser.User.Sid = UserSid;
|
|
TokenUser.User.Attributes = 0;
|
|
|
|
/* Allocate and initialize token groups */
|
|
TokenGroups = AllocateGroupSids(&PrimaryGroupSid,
|
|
&OwnerSid);
|
|
if (TokenGroups == NULL)
|
|
{
|
|
Status = STATUS_INSUFFICIENT_RESOURCES;
|
|
goto done;
|
|
}
|
|
|
|
/* Allocate and initialize token privileges */
|
|
TokenPrivileges = RtlAllocateHeap(GetProcessHeap(), 0,
|
|
sizeof(TOKEN_PRIVILEGES)
|
|
+ sizeof(DefaultPrivs) / sizeof(DefaultPrivs[0])
|
|
* sizeof(LUID_AND_ATTRIBUTES));
|
|
if (TokenPrivileges == NULL)
|
|
{
|
|
Status = STATUS_INSUFFICIENT_RESOURCES;
|
|
goto done;
|
|
}
|
|
|
|
TokenPrivileges->PrivilegeCount = 0;
|
|
for (i = 0; i < sizeof(DefaultPrivs) / sizeof(DefaultPrivs[0]); i++)
|
|
{
|
|
if (! LookupPrivilegeValueW(NULL,
|
|
DefaultPrivs[i].PrivName,
|
|
&TokenPrivileges->Privileges[TokenPrivileges->PrivilegeCount].Luid))
|
|
{
|
|
WARN("Can't set privilege %S\n", DefaultPrivs[i].PrivName);
|
|
}
|
|
else
|
|
{
|
|
TokenPrivileges->Privileges[TokenPrivileges->PrivilegeCount].Attributes = DefaultPrivs[i].Attributes;
|
|
TokenPrivileges->PrivilegeCount++;
|
|
}
|
|
}
|
|
|
|
TokenOwner.Owner = OwnerSid;
|
|
TokenPrimaryGroup.PrimaryGroup = PrimaryGroupSid;
|
|
|
|
Dacl = RtlAllocateHeap(GetProcessHeap(), 0, 1024);
|
|
if (Dacl == NULL)
|
|
{
|
|
Status = STATUS_INSUFFICIENT_RESOURCES;
|
|
goto done;
|
|
}
|
|
|
|
Status = RtlCreateAcl(Dacl, 1024, ACL_REVISION);
|
|
if (!NT_SUCCESS(Status))
|
|
goto done;
|
|
|
|
RtlAddAccessAllowedAce(Dacl,
|
|
ACL_REVISION,
|
|
GENERIC_ALL,
|
|
OwnerSid);
|
|
|
|
RtlAllocateAndInitializeSid(&SystemAuthority,
|
|
1,
|
|
SECURITY_LOCAL_SYSTEM_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
SECURITY_NULL_RID,
|
|
&LocalSystemSid);
|
|
|
|
/* SID: S-1-5-18 */
|
|
RtlAddAccessAllowedAce(Dacl,
|
|
ACL_REVISION,
|
|
GENERIC_ALL,
|
|
LocalSystemSid);
|
|
|
|
RtlFreeSid(LocalSystemSid);
|
|
|
|
TokenDefaultDacl.DefaultDacl = Dacl;
|
|
|
|
memcpy(TokenSource.SourceName,
|
|
"User32 ",
|
|
8);
|
|
|
|
Status = NtAllocateLocallyUniqueId(&TokenSource.SourceIdentifier);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
RtlFreeHeap(GetProcessHeap(), 0, Dacl);
|
|
FreeGroupSids(TokenGroups);
|
|
RtlFreeHeap(GetProcessHeap(), 0, TokenPrivileges);
|
|
RtlFreeSid(UserSid);
|
|
return FALSE;
|
|
}
|
|
|
|
Status = NtCreateToken(phToken,
|
|
TOKEN_ALL_ACCESS,
|
|
&ObjectAttributes,
|
|
TokenPrimary,
|
|
&AuthenticationId,
|
|
&ExpirationTime,
|
|
&TokenUser,
|
|
TokenGroups,
|
|
TokenPrivileges,
|
|
&TokenOwner,
|
|
&TokenPrimaryGroup,
|
|
&TokenDefaultDacl,
|
|
&TokenSource);
|
|
|
|
done:
|
|
if (Dacl != NULL)
|
|
RtlFreeHeap(GetProcessHeap(), 0, Dacl);
|
|
|
|
if (TokenGroups != NULL)
|
|
FreeGroupSids(TokenGroups);
|
|
|
|
if (TokenPrivileges != NULL)
|
|
RtlFreeHeap(GetProcessHeap(), 0, TokenPrivileges);
|
|
|
|
if (UserSid != NULL)
|
|
RtlFreeHeap(GetProcessHeap(), 0, UserSid);
|
|
|
|
return NT_SUCCESS(Status);
|
|
}
|
|
|
|
/* EOF */
|