2 * Unix SMB/CIFS implementation.
3 * Virtual Windows Registry Layer
4 * Copyright (C) Gerald Carter 2002-2005
5 * Copyright (C) Michael Adam 2006-2008
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License as published by
9 * the Free Software Foundation; either version 3 of the License, or
10 * (at your option) any later version.
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU General Public License for more details.
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, see <http://www.gnu.org/licenses/>.
22 * Implementation of registry frontend view functions.
23 * Functions moved from reg_frontend.c to minimize linker deps.
29 #define DBGC_CLASS DBGC_REGISTRY
31 static const struct generic_mapping reg_generic_map
=
32 { REG_KEY_READ
, REG_KEY_WRITE
, REG_KEY_EXECUTE
, REG_KEY_ALL
};
34 /********************************************************************
35 ********************************************************************/
37 static WERROR
construct_registry_sd(TALLOC_CTX
*ctx
, SEC_DESC
**psd
)
46 /* basic access for Everyone */
48 init_sec_access(&mask
, REG_KEY_READ
);
49 init_sec_ace(&ace
[i
++], &global_sid_World
, SEC_ACE_TYPE_ACCESS_ALLOWED
,
52 /* Full Access 'BUILTIN\Administrators' */
54 init_sec_access(&mask
, REG_KEY_ALL
);
55 init_sec_ace(&ace
[i
++], &global_sid_Builtin_Administrators
,
56 SEC_ACE_TYPE_ACCESS_ALLOWED
, mask
, 0);
58 /* Full Access 'NT Authority\System' */
60 init_sec_access(&mask
, REG_KEY_ALL
);
61 init_sec_ace(&ace
[i
++], &global_sid_System
, SEC_ACE_TYPE_ACCESS_ALLOWED
,
64 /* create the security descriptor */
66 acl
= make_sec_acl(ctx
, NT4_ACL_REVISION
, i
, ace
);
71 sd
= make_sec_desc(ctx
, SEC_DESC_REVISION
, SEC_DESC_SELF_RELATIVE
,
72 &global_sid_Builtin_Administrators
,
73 &global_sid_System
, NULL
, acl
,
83 /***********************************************************************
84 High level wrapper function for storing registry subkeys
85 ***********************************************************************/
87 bool store_reg_keys( REGISTRY_KEY
*key
, REGSUBKEY_CTR
*subkeys
)
89 if ( key
->hook
&& key
->hook
->ops
&& key
->hook
->ops
->store_subkeys
)
90 return key
->hook
->ops
->store_subkeys( key
->name
, subkeys
);
95 /***********************************************************************
96 High level wrapper function for storing registry values
97 ***********************************************************************/
99 bool store_reg_values( REGISTRY_KEY
*key
, REGVAL_CTR
*val
)
101 if ( key
->hook
&& key
->hook
->ops
&& key
->hook
->ops
->store_values
)
102 return key
->hook
->ops
->store_values( key
->name
, val
);
107 /***********************************************************************
108 High level wrapper function for enumerating registry subkeys
109 Initialize the TALLOC_CTX if necessary
110 ***********************************************************************/
112 int fetch_reg_keys( REGISTRY_KEY
*key
, REGSUBKEY_CTR
*subkey_ctr
)
116 if ( key
->hook
&& key
->hook
->ops
&& key
->hook
->ops
->fetch_subkeys
)
117 result
= key
->hook
->ops
->fetch_subkeys( key
->name
, subkey_ctr
);
122 /***********************************************************************
123 High level wrapper function for enumerating registry values
124 ***********************************************************************/
126 int fetch_reg_values( REGISTRY_KEY
*key
, REGVAL_CTR
*val
)
130 DEBUG(10, ("fetch_reg_values called for key '%s' (ops %p)\n", key
->name
,
131 (key
->hook
&& key
->hook
->ops
) ? (void *)key
->hook
->ops
: NULL
));
133 if ( key
->hook
&& key
->hook
->ops
&& key
->hook
->ops
->fetch_values
)
134 result
= key
->hook
->ops
->fetch_values( key
->name
, val
);
139 /***********************************************************************
140 High level access check for passing the required access mask to the
141 underlying registry backend
142 ***********************************************************************/
144 bool regkey_access_check( REGISTRY_KEY
*key
, uint32 requested
, uint32
*granted
,
145 const struct nt_user_token
*token
)
152 /* use the default security check if the backend has not defined its
155 if (key
->hook
&& key
->hook
->ops
&& key
->hook
->ops
->reg_access_check
) {
156 return key
->hook
->ops
->reg_access_check( key
->name
, requested
,
161 * The secdesc routines can't yet cope with a NULL talloc ctx sanely.
164 if (!(mem_ctx
= talloc_init("regkey_access_check"))) {
168 err
= regkey_get_secdesc(mem_ctx
, key
, &sec_desc
);
170 if (!W_ERROR_IS_OK(err
)) {
171 TALLOC_FREE(mem_ctx
);
175 se_map_generic( &requested
, ®_generic_map
);
177 if (!se_access_check(sec_desc
, token
, requested
, granted
, &status
)) {
178 TALLOC_FREE(mem_ctx
);
182 TALLOC_FREE(mem_ctx
);
183 return NT_STATUS_IS_OK(status
);
186 WERROR
regkey_get_secdesc(TALLOC_CTX
*mem_ctx
, REGISTRY_KEY
*key
,
187 struct security_descriptor
**psecdesc
)
189 struct security_descriptor
*secdesc
;
192 if (key
->hook
&& key
->hook
->ops
&& key
->hook
->ops
->get_secdesc
) {
193 werr
= key
->hook
->ops
->get_secdesc(mem_ctx
, key
->name
,
195 if (W_ERROR_IS_OK(werr
)) {
200 werr
= construct_registry_sd(mem_ctx
, &secdesc
);
201 if (!W_ERROR_IS_OK(werr
)) {
209 WERROR
regkey_set_secdesc(REGISTRY_KEY
*key
,
210 struct security_descriptor
*psecdesc
)
212 if (key
->hook
&& key
->hook
->ops
&& key
->hook
->ops
->set_secdesc
) {
213 return key
->hook
->ops
->set_secdesc(key
->name
, psecdesc
);
216 return WERR_ACCESS_DENIED
;
220 * Check whether the in-memory version of the subkyes of a
221 * registry key needs update from disk.
223 bool reg_subkeys_need_update(REGISTRY_KEY
*key
, REGSUBKEY_CTR
*subkeys
)
225 if (key
->hook
&& key
->hook
->ops
&& key
->hook
->ops
->subkeys_need_update
)
227 return key
->hook
->ops
->subkeys_need_update(subkeys
);
234 * Check whether the in-memory version of the values of a
235 * registry key needs update from disk.
237 bool reg_values_need_update(REGISTRY_KEY
*key
, REGVAL_CTR
*values
)
239 if (key
->hook
&& key
->hook
->ops
&& key
->hook
->ops
->values_need_update
)
241 return key
->hook
->ops
->values_need_update(values
);