source3/services/services_db.c

   1 /*
   2  *  Unix SMB/CIFS implementation.
   3  *  Service Control API Implementation
   4  *
   5  *  Copyright (C) Marcin Krzysztof Porwit         2005.
   6  *  Largely Rewritten by:
   7  *  Copyright (C) Gerald (Jerry) Carter           2005.
   8  *
   9  *  This program is free software; you can redistribute it and/or modify
  10  *  it under the terms of the GNU General Public License as published by
  11  *  the Free Software Foundation; either version 3 of the License, or
  12  *  (at your option) any later version.
  13  *
  14  *  This program is distributed in the hope that it will be useful,
  15  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17  *  GNU General Public License for more details.
  18  *
  19  *  You should have received a copy of the GNU General Public License
  20  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
  21  */
  22
  23 #include "includes.h"
  24
  25 struct rcinit_file_information {
  26         char *description;
  27 };
  28
  29 struct service_display_info {
  30         const char *servicename;
  31         const char *daemon;
  32         const char *dispname;
  33         const char *description;
  34 };
  35
  36 struct service_display_info builtin_svcs[] = {
  37   { "Spooler",        "smbd",   "Print Spooler", "Internal service for spooling files to print devices" },
  38   { "NETLOGON",       "smbd",   "Net Logon", "File service providing access to policy and profile data (not remotely manageable)" },
  39   { "RemoteRegistry", "smbd",   "Remote Registry Service", "Internal service providing remote access to "
  40                                 "the Samba registry" },
  41   { "WINS",           "nmbd",   "Windows Internet Name Service (WINS)", "Internal service providing a "
  42                                 "NetBIOS point-to-point name server (not remotely manageable)" },
  43   { NULL, NULL, NULL, NULL }
  44 };
  45
  46 struct service_display_info common_unix_svcs[] = {
  47   { "cups",          NULL, "Common Unix Printing System","Provides unified printing support for all operating systems" },
  48   { "postfix",       NULL, "Internet Mail Service",     "Provides support for sending and receiving electonic mail" },
  49   { "sendmail",      NULL, "Internet Mail Service",     "Provides support for sending and receiving electonic mail" },
  50   { "portmap",       NULL, "TCP Port to RPC PortMapper",NULL },
  51   { "xinetd",        NULL, "Internet Meta-Daemon",      NULL },
  52   { "inet",          NULL, "Internet Meta-Daemon",      NULL },
  53   { "xntpd",         NULL, "Network Time Service",      NULL },
  54   { "ntpd",          NULL, "Network Time Service",      NULL },
  55   { "lpd",           NULL, "BSD Print Spooler",         NULL },
  56   { "nfsserver",     NULL, "Network File Service",      NULL },
  57   { "cron",          NULL, "Scheduling Service",        NULL },
  58   { "at",            NULL, "Scheduling Service",        NULL },
  59   { "nscd",          NULL, "Name Service Cache Daemon", NULL },
  60   { "slapd",         NULL, "LDAP Directory Service",    NULL },
  61   { "ldap",          NULL, "LDAP DIrectory Service",    NULL },
  62   { "ypbind",        NULL, "NIS Directory Service",     NULL },
  63   { "courier-imap",  NULL, "IMAP4 Mail Service",        NULL },
  64   { "courier-pop3",  NULL, "POP3 Mail Service",         NULL },
  65   { "named",         NULL, "Domain Name Service",       NULL },
  66   { "bind",          NULL, "Domain Name Service",       NULL },
  67   { "httpd",         NULL, "HTTP Server",               NULL },
  68   { "apache",        NULL, "HTTP Server",               "Provides s highly scalable and flexible web server "
  69                                                         "capable of implementing various protocols incluing "
  70                                                         "but not limited to HTTP" },
  71   { "autofs",        NULL, "Automounter",               NULL },
  72   { "squid",         NULL, "Web Cache Proxy ",          NULL },
  73   { "perfcountd",    NULL, "Performance Monitoring Daemon", NULL },
  74   { "pgsql",         NULL, "PgSQL Database Server",     "Provides service for SQL database from Postgresql.org" },
  75   { "arpwatch",      NULL, "ARP Tables watcher",        "Provides service for monitoring ARP tables for changes" },
  76   { "dhcpd",         NULL, "DHCP Server",               "Provides service for dynamic host configuration and IP assignment" },
  77   { "nwserv",        NULL, "NetWare Server Emulator",   "Provides service for emulating Novell NetWare 3.12 server" },
  78   { "proftpd",       NULL, "Professional FTP Server",   "Provides high configurable service for FTP connection and "
  79                                                         "file transferring" },
  80   { "ssh2",          NULL, "SSH Secure Shell",          "Provides service for secure connection for remote administration" },
  81   { "sshd",          NULL, "SSH Secure Shell",          "Provides service for secure connection for remote administration" },
  82   { NULL, NULL, NULL, NULL }
  83 };
  84
  85
  86 /********************************************************************
  87 ********************************************************************/
  88
  89 static SEC_DESC* construct_service_sd( TALLOC_CTX *ctx )
  90 {
  91         SEC_ACE ace[4];
  92         size_t i = 0;
  93         SEC_DESC *sd = NULL;
  94         SEC_ACL *theacl = NULL;
  95         size_t sd_size;
  96
  97         /* basic access for Everyone */
  98
  99         init_sec_ace(&ace[i++], &global_sid_World,
 100                 SEC_ACE_TYPE_ACCESS_ALLOWED, SERVICE_READ_ACCESS, 0);
 101
 102         init_sec_ace(&ace[i++], &global_sid_Builtin_Power_Users,
 103                         SEC_ACE_TYPE_ACCESS_ALLOWED, SERVICE_EXECUTE_ACCESS, 0);
 104
 105         init_sec_ace(&ace[i++], &global_sid_Builtin_Server_Operators,
 106                 SEC_ACE_TYPE_ACCESS_ALLOWED, SERVICE_ALL_ACCESS, 0);
 107         init_sec_ace(&ace[i++], &global_sid_Builtin_Administrators,
 108                 SEC_ACE_TYPE_ACCESS_ALLOWED, SERVICE_ALL_ACCESS, 0);
 109
 110         /* create the security descriptor */
 111
 112         if ( !(theacl = make_sec_acl(ctx, NT4_ACL_REVISION, i, ace)) )
 113                 return NULL;
 114
 115         if ( !(sd = make_sec_desc(ctx, SECURITY_DESCRIPTOR_REVISION_1,
 116                                   SEC_DESC_SELF_RELATIVE, NULL, NULL, NULL,
 117                                   theacl, &sd_size)) )
 118                 return NULL;
 119
 120         return sd;
 121 }
 122
 123 /********************************************************************
 124  This is where we do the dirty work of filling in things like the
 125  Display name, Description, etc...
 126 ********************************************************************/
 127
 128 static char *get_common_service_dispname( const char *servicename )
 129 {
 130         int i;
 131
 132         for ( i=0; common_unix_svcs[i].servicename; i++ ) {
 133                 if (strequal(servicename, common_unix_svcs[i].servicename)) {
 134                         char *dispname;
 135                         if (asprintf(&dispname,
 136                                 "%s (%s)",
 137                                 common_unix_svcs[i].dispname,
 138                                 common_unix_svcs[i].servicename) < 0) {
 139                                 return NULL;
 140                         }
 141                         return dispname;
 142                 }
 143         }
 144
 145         return SMB_STRDUP(servicename );
 146 }
 147
 148 /********************************************************************
 149 ********************************************************************/
 150
 151 static char *cleanup_string( const char *string )
 152 {
 153         char *clean = NULL;
 154         char *begin, *end;
 155         TALLOC_CTX *ctx = talloc_tos();
 156
 157         clean = talloc_strdup(ctx, string);
 158         if (!clean) {
 159                 return NULL;
 160         }
 161         begin = clean;
 162
 163         /* trim any beginning whilespace */
 164
 165         while (isspace(*begin)) {
 166                 begin++;
 167         }
 168
 169         if (*begin == '\0') {
 170                 return NULL;
 171         }
 172
 173         /* trim any trailing whitespace or carriage returns.
 174            Start at the end and move backwards */
 175
 176         end = begin + strlen(begin) - 1;
 177
 178         while ( isspace(*end) || *end=='\n' || *end=='\r' ) {
 179                 *end = '\0';
 180                 end--;
 181         }
 182
 183         return begin;
 184 }
 185
 186 /********************************************************************
 187 ********************************************************************/
 188
 189 static bool read_init_file( const char *servicename, struct rcinit_file_information **service_info )
 190 {
 191         struct rcinit_file_information *info = NULL;
 192         char *filepath = NULL;
 193         char str[1024];
 194         XFILE *f = NULL;
 195         char *p = NULL;
 196
 197         if ( !(info = TALLOC_ZERO_P( NULL, struct rcinit_file_information ) ) )
 198                 return False;
 199
 200         /* attempt the file open */
 201
 202         filepath = talloc_asprintf(info, "%s/%s/%s", get_dyn_MODULESDIR(),
 203                                 SVCCTL_SCRIPT_DIR, servicename);
 204         if (!filepath) {
 205                 TALLOC_FREE(info);
 206                 return false;
 207         }
 208         if (!(f = x_fopen( filepath, O_RDONLY, 0 ))) {
 209                 DEBUG(0,("read_init_file: failed to open [%s]\n", filepath));
 210                 TALLOC_FREE(info);
 211                 return false;
 212         }
 213
 214         while ( (x_fgets( str, sizeof(str)-1, f )) != NULL ) {
 215                 /* ignore everything that is not a full line
 216                    comment starting with a '#' */
 217
 218                 if ( str[0] != '#' )
 219                         continue;
 220
 221                 /* Look for a line like '^#.*Description:' */
 222
 223                 if ( (p = strstr( str, "Description:" )) != NULL ) {
 224                         char *desc;
 225
 226                         p += strlen( "Description:" ) + 1;
 227                         if ( !p )
 228                                 break;
 229
 230                         if ( (desc = cleanup_string(p)) != NULL )
 231                                 info->description = talloc_strdup( info, desc );
 232                 }
 233         }
 234
 235         x_fclose( f );
 236
 237         if ( !info->description )
 238                 info->description = talloc_strdup( info, "External Unix Service" );
 239
 240         *service_info = info;
 241         TALLOC_FREE(filepath);
 242
 243         return True;
 244 }
 245
 246 /********************************************************************
 247  This is where we do the dirty work of filling in things like the
 248  Display name, Description, etc...
 249 ********************************************************************/
 250
 251 static void fill_service_values(const char *name, struct regval_ctr *values)
 252 {
 253         UNISTR2 data, dname, ipath, description;
 254         uint32 dword;
 255         int i;
 256
 257         /* These values are hardcoded in all QueryServiceConfig() replies.
 258            I'm just storing them here for cosmetic purposes */
 259
 260         dword = SVCCTL_AUTO_START;
 261         regval_ctr_addvalue( values, "Start", REG_DWORD, (char*)&dword, sizeof(uint32));
 262
 263         dword = SERVICE_TYPE_WIN32_OWN_PROCESS;
 264         regval_ctr_addvalue( values, "Type", REG_DWORD, (char*)&dword, sizeof(uint32));
 265
 266         dword = SVCCTL_SVC_ERROR_NORMAL;
 267         regval_ctr_addvalue( values, "ErrorControl", REG_DWORD, (char*)&dword, sizeof(uint32));
 268
 269         /* everything runs as LocalSystem */
 270
 271         init_unistr2( &data, "LocalSystem", UNI_STR_TERMINATE );
 272         regval_ctr_addvalue( values, "ObjectName", REG_SZ, (char*)data.buffer, data.uni_str_len*2);
 273
 274         /* special considerations for internal services and the DisplayName value */
 275
 276         for ( i=0; builtin_svcs[i].servicename; i++ ) {
 277                 if ( strequal( name, builtin_svcs[i].servicename ) ) {
 278                         char *pstr = NULL;
 279                         if (asprintf(&pstr, "%s/%s/%s",
 280                                         get_dyn_MODULESDIR(), SVCCTL_SCRIPT_DIR,
 281                                         builtin_svcs[i].daemon) > 0) {
 282                                 init_unistr2( &ipath, pstr, UNI_STR_TERMINATE );
 283                                 SAFE_FREE(pstr);
 284                         } else {
 285                                 init_unistr2( &ipath, "", UNI_STR_TERMINATE );
 286                         }
 287                         init_unistr2( &description, builtin_svcs[i].description, UNI_STR_TERMINATE );
 288                         init_unistr2( &dname, builtin_svcs[i].dispname, UNI_STR_TERMINATE );
 289                         break;
 290                 }
 291         }
 292
 293         /* default to an external service if we haven't found a match */
 294
 295         if ( builtin_svcs[i].servicename == NULL ) {
 296                 char *pstr = NULL;
 297                 char *dispname = NULL;
 298                 struct rcinit_file_information *init_info = NULL;
 299
 300                 if (asprintf(&pstr, "%s/%s/%s",get_dyn_MODULESDIR(),
 301                                         SVCCTL_SCRIPT_DIR, name) > 0) {
 302                         init_unistr2( &ipath, pstr, UNI_STR_TERMINATE );
 303                         SAFE_FREE(pstr);
 304                 } else {
 305                         init_unistr2( &ipath, "", UNI_STR_TERMINATE );
 306                 }
 307
 308                 /* lookup common unix display names */
 309                 dispname = get_common_service_dispname(name);
 310                 init_unistr2( &dname, dispname ? dispname : "", UNI_STR_TERMINATE );
 311                 SAFE_FREE(dispname);
 312
 313                 /* get info from init file itself */
 314                 if ( read_init_file( name, &init_info ) ) {
 315                         init_unistr2( &description, init_info->description, UNI_STR_TERMINATE );
 316                         TALLOC_FREE( init_info );
 317                 }
 318                 else {
 319                         init_unistr2( &description, "External Unix Service", UNI_STR_TERMINATE );
 320                 }
 321         }
 322
 323         /* add the new values */
 324
 325         regval_ctr_addvalue( values, "DisplayName", REG_SZ, (char*)dname.buffer, dname.uni_str_len*2);
 326         regval_ctr_addvalue( values, "ImagePath", REG_SZ, (char*)ipath.buffer, ipath.uni_str_len*2);
 327         regval_ctr_addvalue( values, "Description", REG_SZ, (char*)description.buffer, description.uni_str_len*2);
 328
 329         return;
 330 }
 331
 332 /********************************************************************
 333 ********************************************************************/
 334
 335 static void add_new_svc_name(struct registry_key_handle *key_parent,
 336                              struct regsubkey_ctr *subkeys,
 337                              const char *name )
 338 {
 339         struct registry_key_handle *key_service = NULL, *key_secdesc = NULL;
 340         WERROR wresult;
 341         char *path = NULL;
 342         struct regval_ctr *values = NULL;
 343         struct regsubkey_ctr *svc_subkeys = NULL;
 344         SEC_DESC *sd = NULL;
 345         DATA_BLOB sd_blob;
 346         NTSTATUS status;
 347
 348         /* add to the list and create the subkey path */
 349
 350         regsubkey_ctr_addkey( subkeys, name );
 351         store_reg_keys( key_parent, subkeys );
 352
 353         /* open the new service key */
 354
 355         if (asprintf(&path, "%s\\%s", KEY_SERVICES, name) < 0) {
 356                 return;
 357         }
 358         wresult = regkey_open_internal( NULL, &key_service, path,
 359                                         get_root_nt_token(), REG_KEY_ALL );
 360         if ( !W_ERROR_IS_OK(wresult) ) {
 361                 DEBUG(0,("add_new_svc_name: key lookup failed! [%s] (%s)\n",
 362                         path, win_errstr(wresult)));
 363                 SAFE_FREE(path);
 364                 return;
 365         }
 366         SAFE_FREE(path);
 367
 368         /* add the 'Security' key */
 369
 370         wresult = regsubkey_ctr_init(key_service, &svc_subkeys);
 371         if (!W_ERROR_IS_OK(wresult)) {
 372                 DEBUG(0,("add_new_svc_name: talloc() failed!\n"));
 373                 TALLOC_FREE( key_service );
 374                 return;
 375         }
 376
 377         fetch_reg_keys( key_service, svc_subkeys );
 378         regsubkey_ctr_addkey( svc_subkeys, "Security" );
 379         store_reg_keys( key_service, svc_subkeys );
 380
 381         /* now for the service values */
 382
 383         if ( !(values = TALLOC_ZERO_P( key_service, struct regval_ctr )) ) {
 384                 DEBUG(0,("add_new_svc_name: talloc() failed!\n"));
 385                 TALLOC_FREE( key_service );
 386                 return;
 387         }
 388
 389         fill_service_values( name, values );
 390         store_reg_values( key_service, values );
 391
 392         /* cleanup the service key*/
 393
 394         TALLOC_FREE( key_service );
 395
 396         /* now add the security descriptor */
 397
 398         if (asprintf(&path, "%s\\%s\\%s", KEY_SERVICES, name, "Security") < 0) {
 399                 return;
 400         }
 401         wresult = regkey_open_internal( NULL, &key_secdesc, path,
 402                                         get_root_nt_token(), REG_KEY_ALL );
 403         if ( !W_ERROR_IS_OK(wresult) ) {
 404                 DEBUG(0,("add_new_svc_name: key lookup failed! [%s] (%s)\n",
 405                         path, win_errstr(wresult)));
 406                 TALLOC_FREE( key_secdesc );
 407                 SAFE_FREE(path);
 408                 return;
 409         }
 410         SAFE_FREE(path);
 411
 412         if ( !(values = TALLOC_ZERO_P( key_secdesc, struct regval_ctr )) ) {
 413                 DEBUG(0,("add_new_svc_name: talloc() failed!\n"));
 414                 TALLOC_FREE( key_secdesc );
 415                 return;
 416         }
 417
 418         if ( !(sd = construct_service_sd(key_secdesc)) ) {
 419                 DEBUG(0,("add_new_svc_name: Failed to create default sec_desc!\n"));
 420                 TALLOC_FREE( key_secdesc );
 421                 return;
 422         }
 423
 424         status = marshall_sec_desc(key_secdesc, sd, &sd_blob.data,
 425                                    &sd_blob.length);
 426         if (!NT_STATUS_IS_OK(status)) {
 427                 DEBUG(0, ("marshall_sec_desc failed: %s\n",
 428                           nt_errstr(status)));
 429                 TALLOC_FREE(key_secdesc);
 430                 return;
 431         }
 432
 433         regval_ctr_addvalue(values, "Security", REG_BINARY,
 434                             (const char *)sd_blob.data, sd_blob.length);
 435         store_reg_values( key_secdesc, values );
 436
 437         TALLOC_FREE( key_secdesc );
 438
 439         return;
 440 }
 441
 442 /********************************************************************
 443 ********************************************************************/
 444
 445 void svcctl_init_keys( void )
 446 {
 447         const char **service_list = lp_svcctl_list();
 448         int i;
 449         struct regsubkey_ctr *subkeys = NULL;
 450         struct registry_key_handle *key = NULL;
 451         WERROR wresult;
 452
 453         /* bad mojo here if the lookup failed.  Should not happen */
 454
 455         wresult = regkey_open_internal( NULL, &key, KEY_SERVICES,
 456                                         get_root_nt_token(), REG_KEY_ALL );
 457
 458         if ( !W_ERROR_IS_OK(wresult) ) {
 459                 DEBUG(0,("svcctl_init_keys: key lookup failed! (%s)\n",
 460                         win_errstr(wresult)));
 461                 return;
 462         }
 463
 464         /* lookup the available subkeys */
 465
 466         wresult = regsubkey_ctr_init(key, &subkeys);
 467         if (!W_ERROR_IS_OK(wresult)) {
 468                 DEBUG(0,("svcctl_init_keys: talloc() failed!\n"));
 469                 TALLOC_FREE( key );
 470                 return;
 471         }
 472
 473         fetch_reg_keys( key, subkeys );
 474
 475         /* the builtin services exist */
 476
 477         for ( i=0; builtin_svcs[i].servicename; i++ )
 478                 add_new_svc_name( key, subkeys, builtin_svcs[i].servicename );
 479
 480         for ( i=0; service_list && service_list[i]; i++ ) {
 481
 482                 /* only add new services */
 483                 if ( regsubkey_ctr_key_exists( subkeys, service_list[i] ) )
 484                         continue;
 485
 486                 /* Add the new service key and initialize the appropriate values */
 487
 488                 add_new_svc_name( key, subkeys, service_list[i] );
 489         }
 490
 491         TALLOC_FREE( key );
 492
 493         /* initialize the control hooks */
 494
 495         init_service_op_table();
 496
 497         return;
 498 }
 499
 500 /********************************************************************
 501  This is where we do the dirty work of filling in things like the
 502  Display name, Description, etc...Always return a default secdesc
 503  in case of any failure.
 504 ********************************************************************/
 505
 506 SEC_DESC *svcctl_get_secdesc( TALLOC_CTX *ctx, const char *name, NT_USER_TOKEN *token )
 507 {
 508         struct registry_key_handle *key = NULL;
 509         struct regval_ctr *values = NULL;
 510         struct regval_blob *val = NULL;
 511         SEC_DESC *ret_sd = NULL;
 512         char *path= NULL;
 513         WERROR wresult;
 514         NTSTATUS status;
 515
 516         /* now add the security descriptor */
 517
 518         if (asprintf(&path, "%s\\%s\\%s", KEY_SERVICES, name, "Security") < 0) {
 519                 return NULL;
 520         }
 521         wresult = regkey_open_internal( NULL, &key, path, token,
 522                                         REG_KEY_ALL );
 523         if ( !W_ERROR_IS_OK(wresult) ) {
 524                 DEBUG(0,("svcctl_get_secdesc: key lookup failed! [%s] (%s)\n",
 525                         path, win_errstr(wresult)));
 526                 goto done;
 527         }
 528
 529         if ( !(values = TALLOC_ZERO_P( key, struct regval_ctr )) ) {
 530                 DEBUG(0,("svcctl_get_secdesc: talloc() failed!\n"));
 531                 goto done;
 532         }
 533
 534         if (fetch_reg_values( key, values ) == -1) {
 535                 DEBUG(0, ("Error getting registry values\n"));
 536                 goto done;
 537         }
 538
 539         if ( !(val = regval_ctr_getvalue( values, "Security" )) ) {
 540                 goto fallback_to_default_sd;
 541         }
 542
 543         /* stream the service security descriptor */
 544
 545         status = unmarshall_sec_desc(ctx, regval_data_p(val),
 546                                      regval_size(val), &ret_sd);
 547
 548         if (NT_STATUS_IS_OK(status)) {
 549                 goto done;
 550         }
 551
 552 fallback_to_default_sd:
 553         DEBUG(6, ("svcctl_get_secdesc: constructing default secdesc for "
 554                   "service [%s]\n", name));
 555         ret_sd = construct_service_sd(ctx);
 556
 557 done:
 558         SAFE_FREE(path);
 559         TALLOC_FREE(key);
 560         return ret_sd;
 561 }
 562
 563 /********************************************************************
 564  Wrapper to make storing a Service sd easier
 565 ********************************************************************/
 566
 567 bool svcctl_set_secdesc( TALLOC_CTX *ctx, const char *name, SEC_DESC *sec_desc, NT_USER_TOKEN *token )
 568 {
 569         struct registry_key_handle *key = NULL;
 570         WERROR wresult;
 571         char *path = NULL;
 572         struct regval_ctr *values = NULL;
 573         DATA_BLOB blob;
 574         NTSTATUS status;
 575         bool ret = False;
 576
 577         /* now add the security descriptor */
 578
 579         if (asprintf(&path, "%s\\%s\\%s", KEY_SERVICES, name, "Security") < 0) {
 580                 return false;
 581         }
 582         wresult = regkey_open_internal( NULL, &key, path, token,
 583                                         REG_KEY_ALL );
 584         if ( !W_ERROR_IS_OK(wresult) ) {
 585                 DEBUG(0,("svcctl_get_secdesc: key lookup failed! [%s] (%s)\n",
 586                         path, win_errstr(wresult)));
 587                 SAFE_FREE(path);
 588                 return False;
 589         }
 590         SAFE_FREE(path);
 591
 592         if ( !(values = TALLOC_ZERO_P( key, struct regval_ctr )) ) {
 593                 DEBUG(0,("svcctl_set_secdesc: talloc() failed!\n"));
 594                 TALLOC_FREE( key );
 595                 return False;
 596         }
 597
 598         /* stream the printer security descriptor */
 599
 600         status = marshall_sec_desc(ctx, sec_desc, &blob.data, &blob.length);
 601         if (!NT_STATUS_IS_OK(status)) {
 602                 DEBUG(0,("svcctl_set_secdesc: ndr_push_struct_blob() failed!\n"));
 603                 TALLOC_FREE( key );
 604                 return False;
 605         }
 606
 607         regval_ctr_addvalue( values, "Security", REG_BINARY, (const char *)blob.data, blob.length);
 608         ret = store_reg_values( key, values );
 609
 610         /* cleanup */
 611
 612         TALLOC_FREE( key);
 613
 614         return ret;
 615 }
 616
 617 /********************************************************************
 618 ********************************************************************/
 619
 620 const char *svcctl_lookup_dispname(TALLOC_CTX *ctx, const char *name, NT_USER_TOKEN *token )
 621 {
 622         char *display_name = NULL;
 623         struct registry_key_handle *key = NULL;
 624         struct regval_ctr *values = NULL;
 625         struct regval_blob *val = NULL;
 626         char *path = NULL;
 627         WERROR wresult;
 628
 629         /* now add the security descriptor */
 630
 631         if (asprintf(&path, "%s\\%s", KEY_SERVICES, name) < 0) {
 632                 return NULL;
 633         }
 634         wresult = regkey_open_internal( NULL, &key, path, token,
 635                                         REG_KEY_READ );
 636         if ( !W_ERROR_IS_OK(wresult) ) {
 637                 DEBUG(0,("svcctl_lookup_dispname: key lookup failed! [%s] (%s)\n",
 638                         path, win_errstr(wresult)));
 639                 SAFE_FREE(path);
 640                 goto fail;
 641         }
 642         SAFE_FREE(path);
 643
 644         if ( !(values = TALLOC_ZERO_P( key, struct regval_ctr )) ) {
 645                 DEBUG(0,("svcctl_lookup_dispname: talloc() failed!\n"));
 646                 TALLOC_FREE( key );
 647                 goto fail;
 648         }
 649
 650         fetch_reg_values( key, values );
 651
 652         if ( !(val = regval_ctr_getvalue( values, "DisplayName" )) )
 653                 goto fail;
 654
 655         rpcstr_pull_talloc(ctx, &display_name, regval_data_p(val), regval_size(val), 0 );
 656
 657         TALLOC_FREE( key );
 658
 659         return display_name;
 660
 661 fail:
 662         /* default to returning the service name */
 663         TALLOC_FREE( key );
 664         return talloc_strdup(ctx, name);
 665 }
 666
 667 /********************************************************************
 668 ********************************************************************/
 669
 670 const char *svcctl_lookup_description(TALLOC_CTX *ctx, const char *name, NT_USER_TOKEN *token )
 671 {
 672         char *description = NULL;
 673         struct registry_key_handle *key = NULL;
 674         struct regval_ctr *values = NULL;
 675         struct regval_blob *val = NULL;
 676         char *path = NULL;
 677         WERROR wresult;
 678
 679         /* now add the security descriptor */
 680
 681         if (asprintf(&path, "%s\\%s", KEY_SERVICES, name) < 0) {
 682                 return NULL;
 683         }
 684         wresult = regkey_open_internal( NULL, &key, path, token,
 685                                         REG_KEY_READ );
 686         if ( !W_ERROR_IS_OK(wresult) ) {
 687                 DEBUG(0,("svcctl_lookup_description: key lookup failed! [%s] (%s)\n",
 688                         path, win_errstr(wresult)));
 689                 SAFE_FREE(path);
 690                 return NULL;
 691         }
 692         SAFE_FREE(path);
 693
 694         if ( !(values = TALLOC_ZERO_P( key, struct regval_ctr )) ) {
 695                 DEBUG(0,("svcctl_lookup_description: talloc() failed!\n"));
 696                 TALLOC_FREE( key );
 697                 return NULL;
 698         }
 699
 700         fetch_reg_values( key, values );
 701
 702         if ( !(val = regval_ctr_getvalue( values, "Description" )) ) {
 703                 TALLOC_FREE( key );
 704                 return "Unix Service";
 705         }
 706         rpcstr_pull_talloc(ctx, &description, regval_data_p(val), regval_size(val), 0 );
 707         TALLOC_FREE(key);
 708
 709         return description;
 710 }
 711
 712
 713 /********************************************************************
 714 ********************************************************************/
 715
 716 struct regval_ctr *svcctl_fetch_regvalues(const char *name, NT_USER_TOKEN *token)
 717 {
 718         struct registry_key_handle *key = NULL;
 719         struct regval_ctr *values = NULL;
 720         char *path = NULL;
 721         WERROR wresult;
 722
 723         /* now add the security descriptor */
 724
 725         if (asprintf(&path, "%s\\%s", KEY_SERVICES, name) < 0) {
 726                 return NULL;
 727         }
 728         wresult = regkey_open_internal( NULL, &key, path, token,
 729                                         REG_KEY_READ );
 730         if ( !W_ERROR_IS_OK(wresult) ) {
 731                 DEBUG(0,("svcctl_fetch_regvalues: key lookup failed! [%s] (%s)\n",
 732                         path, win_errstr(wresult)));
 733                 SAFE_FREE(path);
 734                 return NULL;
 735         }
 736         SAFE_FREE(path);
 737
 738         if ( !(values = TALLOC_ZERO_P( NULL, struct regval_ctr )) ) {
 739                 DEBUG(0,("svcctl_fetch_regvalues: talloc() failed!\n"));
 740                 TALLOC_FREE( key );
 741                 return NULL;
 742         }
 743         fetch_reg_values( key, values );
 744
 745         TALLOC_FREE( key );
 746         return values;
 747 }