source4/torture/rpc/svcctl.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    test suite for srvsvc rpc operations
   4
   5    Copyright (C) Jelmer Vernooij 2004
   6    Copyright (C) Guenther Deschner 2008,2009
   7
   8    This program is free software; you can redistribute it and/or modify
   9    it under the terms of the GNU General Public License as published by
  10    the Free Software Foundation; either version 3 of the License, or
  11    (at your option) any later version.
  12
  13    This program is distributed in the hope that it will be useful,
  14    but WITHOUT ANY WARRANTY; without even the implied warranty of
  15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16    GNU General Public License for more details.
  17
  18    You should have received a copy of the GNU General Public License
  19    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  20 */
  21
  22 #include "includes.h"
  23 #include "librpc/gen_ndr/ndr_svcctl_c.h"
  24 #include "librpc/gen_ndr/ndr_svcctl.h"
  25 #include "torture/rpc/rpc.h"
  26 #include "param/param.h"
  27
  28 #define TORTURE_DEFAULT_SERVICE "Spooler"
  29
  30 static bool test_OpenSCManager(struct dcerpc_pipe *p, struct torture_context *tctx, struct policy_handle *h)
  31 {
  32         struct svcctl_OpenSCManagerW r;
  33
  34         r.in.MachineName = NULL;
  35         r.in.DatabaseName = NULL;
  36         r.in.access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
  37         r.out.handle = h;
  38
  39         torture_assert_ntstatus_ok(tctx,
  40                                    dcerpc_svcctl_OpenSCManagerW(p, tctx, &r),
  41                                    "OpenSCManager failed!");
  42
  43         return true;
  44 }
  45
  46 static bool test_CloseServiceHandle(struct dcerpc_pipe *p, struct torture_context *tctx, struct policy_handle *h)
  47 {
  48         struct svcctl_CloseServiceHandle r;
  49
  50         r.in.handle = h;
  51         r.out.handle = h;
  52         torture_assert_ntstatus_ok(tctx,
  53                                    dcerpc_svcctl_CloseServiceHandle(p, tctx, &r),
  54                                    "CloseServiceHandle failed");
  55
  56         return true;
  57 }
  58
  59 static bool test_OpenService(struct dcerpc_pipe *p, struct torture_context *tctx,
  60                              struct policy_handle *h, const char *name, struct policy_handle *s)
  61 {
  62         struct svcctl_OpenServiceW r;
  63
  64         r.in.scmanager_handle = h;
  65         r.in.ServiceName = name;
  66         r.in.access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
  67         r.out.handle = s;
  68
  69         torture_assert_ntstatus_ok(tctx,
  70                                    dcerpc_svcctl_OpenServiceW(p, tctx, &r),
  71                                    "OpenServiceW failed!");
  72         torture_assert_werr_ok(tctx, r.out.result, "OpenServiceW failed!");
  73
  74         return true;
  75
  76 }
  77
  78 static bool test_QueryServiceStatus(struct torture_context *tctx,
  79                                     struct dcerpc_pipe *p)
  80 {
  81         struct svcctl_QueryServiceStatus r;
  82         struct policy_handle h, s;
  83         struct SERVICE_STATUS service_status;
  84         NTSTATUS status;
  85
  86         if (!test_OpenSCManager(p, tctx, &h))
  87                 return false;
  88
  89         if (!test_OpenService(p, tctx, &h, TORTURE_DEFAULT_SERVICE, &s))
  90                 return false;
  91
  92         r.in.handle = &s;
  93         r.out.service_status = &service_status;
  94
  95         status = dcerpc_svcctl_QueryServiceStatus(p, tctx, &r);
  96         torture_assert_ntstatus_ok(tctx, status, "QueryServiceStatus failed!");
  97         torture_assert_werr_ok(tctx, r.out.result, "QueryServiceStatus failed!");
  98
  99         if (!test_CloseServiceHandle(p, tctx, &s))
 100                 return false;
 101
 102         if (!test_CloseServiceHandle(p, tctx, &h))
 103                 return false;
 104
 105         return true;
 106 }
 107
 108 static bool test_QueryServiceStatusEx(struct torture_context *tctx, struct dcerpc_pipe *p)
 109 {
 110         struct svcctl_QueryServiceStatusEx r;
 111         struct policy_handle h, s;
 112         NTSTATUS status;
 113
 114         uint32_t info_level = SVC_STATUS_PROCESS_INFO;
 115         uint8_t *buffer;
 116         uint32_t offered = 0;
 117         uint32_t needed = 0;
 118
 119         if (!test_OpenSCManager(p, tctx, &h))
 120                 return false;
 121
 122         if (!test_OpenService(p, tctx, &h, TORTURE_DEFAULT_SERVICE, &s))
 123                 return false;
 124
 125         buffer = talloc(tctx, uint8_t);
 126
 127         r.in.handle = &s;
 128         r.in.info_level = info_level;
 129         r.in.offered = offered;
 130         r.out.buffer = buffer;
 131         r.out.needed = &needed;
 132
 133         status = dcerpc_svcctl_QueryServiceStatusEx(p, tctx, &r);
 134         torture_assert_ntstatus_ok(tctx, status, "QueryServiceStatusEx failed!");
 135
 136         if (W_ERROR_EQUAL(r.out.result, WERR_INSUFFICIENT_BUFFER)) {
 137                 r.in.offered = needed;
 138                 buffer = talloc_array(tctx, uint8_t, needed);
 139                 r.out.buffer = buffer;
 140
 141                 status = dcerpc_svcctl_QueryServiceStatusEx(p, tctx, &r);
 142                 torture_assert_ntstatus_ok(tctx, status, "QueryServiceStatusEx failed!");
 143                 torture_assert_werr_ok(tctx, r.out.result, "QueryServiceStatusEx failed!");
 144         }
 145
 146         if (!test_CloseServiceHandle(p, tctx, &s))
 147                 return false;
 148
 149         if (!test_CloseServiceHandle(p, tctx, &h))
 150                 return false;
 151
 152         return true;
 153 }
 154
 155 static bool test_QueryServiceConfigW(struct torture_context *tctx,
 156                                      struct dcerpc_pipe *p)
 157 {
 158         struct svcctl_QueryServiceConfigW r;
 159         struct QUERY_SERVICE_CONFIG query;
 160         struct policy_handle h, s;
 161         NTSTATUS status;
 162
 163         uint32_t offered = 0;
 164         uint32_t needed = 0;
 165
 166         if (!test_OpenSCManager(p, tctx, &h))
 167                 return false;
 168
 169         if (!test_OpenService(p, tctx, &h, TORTURE_DEFAULT_SERVICE, &s))
 170                 return false;
 171
 172         r.in.handle = &s;
 173         r.in.offered = offered;
 174         r.out.query = &query;
 175         r.out.needed = &needed;
 176
 177         status = dcerpc_svcctl_QueryServiceConfigW(p, tctx, &r);
 178         torture_assert_ntstatus_ok(tctx, status, "QueryServiceConfigW failed!");
 179
 180         if (W_ERROR_EQUAL(r.out.result, WERR_INSUFFICIENT_BUFFER)) {
 181                 r.in.offered = needed;
 182                 status = dcerpc_svcctl_QueryServiceConfigW(p, tctx, &r);
 183                 torture_assert_ntstatus_ok(tctx, status, "QueryServiceConfigW failed!");
 184         }
 185
 186         torture_assert_werr_ok(tctx, r.out.result, "QueryServiceConfigW failed!");
 187
 188         if (!test_CloseServiceHandle(p, tctx, &s))
 189                 return false;
 190
 191         if (!test_CloseServiceHandle(p, tctx, &h))
 192                 return false;
 193
 194         return true;
 195 }
 196
 197 static bool test_QueryServiceConfig2W(struct torture_context *tctx, struct dcerpc_pipe *p)
 198 {
 199         struct svcctl_QueryServiceConfig2W r;
 200         struct policy_handle h, s;
 201         NTSTATUS status;
 202
 203         uint32_t info_level = SERVICE_CONFIG_DESCRIPTION;
 204         uint8_t *buffer;
 205         uint32_t offered = 0;
 206         uint32_t needed = 0;
 207
 208         if (!test_OpenSCManager(p, tctx, &h))
 209                 return false;
 210
 211         if (!test_OpenService(p, tctx, &h, TORTURE_DEFAULT_SERVICE, &s))
 212                 return false;
 213
 214         buffer = talloc(tctx, uint8_t);
 215
 216         r.in.handle = &s;
 217         r.in.info_level = info_level;
 218         r.in.offered = offered;
 219         r.out.buffer = buffer;
 220         r.out.needed = &needed;
 221
 222         status = dcerpc_svcctl_QueryServiceConfig2W(p, tctx, &r);
 223         torture_assert_ntstatus_ok(tctx, status, "QueryServiceConfig2W failed!");
 224
 225         if (W_ERROR_EQUAL(r.out.result, WERR_INSUFFICIENT_BUFFER)) {
 226                 r.in.offered = needed;
 227                 buffer = talloc_array(tctx, uint8_t, needed);
 228                 r.out.buffer = buffer;
 229
 230                 status = dcerpc_svcctl_QueryServiceConfig2W(p, tctx, &r);
 231                 torture_assert_ntstatus_ok(tctx, status, "QueryServiceConfig2W failed!");
 232                 torture_assert_werr_ok(tctx, r.out.result, "QueryServiceConfig2W failed!");
 233         }
 234
 235         r.in.info_level = SERVICE_CONFIG_FAILURE_ACTIONS;
 236         r.in.offered = offered;
 237         r.out.buffer = buffer;
 238         r.out.needed = &needed;
 239
 240         status = dcerpc_svcctl_QueryServiceConfig2W(p, tctx, &r);
 241         torture_assert_ntstatus_ok(tctx, status, "QueryServiceConfig2W failed!");
 242
 243         if (W_ERROR_EQUAL(r.out.result, WERR_INSUFFICIENT_BUFFER)) {
 244                 r.in.offered = needed;
 245                 buffer = talloc_array(tctx, uint8_t, needed);
 246                 r.out.buffer = buffer;
 247
 248                 status = dcerpc_svcctl_QueryServiceConfig2W(p, tctx, &r);
 249                 torture_assert_ntstatus_ok(tctx, status, "QueryServiceConfig2W failed!");
 250                 torture_assert_werr_ok(tctx, r.out.result, "QueryServiceConfig2W failed!");
 251         }
 252
 253         if (!test_CloseServiceHandle(p, tctx, &s))
 254                 return false;
 255
 256         if (!test_CloseServiceHandle(p, tctx, &h))
 257                 return false;
 258
 259         return true;
 260 }
 261
 262 static bool test_QueryServiceObjectSecurity(struct torture_context *tctx,
 263                                             struct dcerpc_pipe *p)
 264 {
 265         struct svcctl_QueryServiceObjectSecurity r;
 266         struct policy_handle h, s;
 267
 268         uint8_t *buffer;
 269         uint32_t needed;
 270
 271         if (!test_OpenSCManager(p, tctx, &h))
 272                 return false;
 273
 274         if (!test_OpenService(p, tctx, &h, TORTURE_DEFAULT_SERVICE, &s))
 275                 return false;
 276
 277         r.in.handle = &s;
 278         r.in.security_flags = 0;
 279         r.in.offered = 0;
 280         r.out.buffer = NULL;
 281         r.out.needed = &needed;
 282
 283         torture_assert_ntstatus_ok(tctx,
 284                 dcerpc_svcctl_QueryServiceObjectSecurity(p, tctx, &r),
 285                 "QueryServiceObjectSecurity failed!");
 286         torture_assert_werr_equal(tctx, r.out.result, WERR_INVALID_PARAM,
 287                 "QueryServiceObjectSecurity failed!");
 288
 289         r.in.security_flags = SECINFO_DACL;
 290
 291         torture_assert_ntstatus_ok(tctx,
 292                 dcerpc_svcctl_QueryServiceObjectSecurity(p, tctx, &r),
 293                 "QueryServiceObjectSecurity failed!");
 294
 295         if (W_ERROR_EQUAL(r.out.result, WERR_INSUFFICIENT_BUFFER)) {
 296                 r.in.offered = needed;
 297                 buffer = talloc_array(tctx, uint8_t, needed);
 298                 r.out.buffer = buffer;
 299                 torture_assert_ntstatus_ok(tctx,
 300                         dcerpc_svcctl_QueryServiceObjectSecurity(p, tctx, &r),
 301                         "QueryServiceObjectSecurity failed!");
 302         }
 303
 304         torture_assert_werr_ok(tctx, r.out.result, "QueryServiceObjectSecurity failed!");
 305
 306         if (!test_CloseServiceHandle(p, tctx, &s))
 307                 return false;
 308
 309         if (!test_CloseServiceHandle(p, tctx, &h))
 310                 return false;
 311
 312         return true;
 313 }
 314
 315 static bool test_StartServiceW(struct torture_context *tctx,
 316                                struct dcerpc_pipe *p)
 317 {
 318         struct svcctl_StartServiceW r;
 319         struct policy_handle h, s;
 320
 321         if (!test_OpenSCManager(p, tctx, &h))
 322                 return false;
 323
 324         if (!test_OpenService(p, tctx, &h, TORTURE_DEFAULT_SERVICE, &s))
 325                 return false;
 326
 327         r.in.handle = &s;
 328         r.in.NumArgs = 0;
 329         r.in.Arguments = NULL;
 330
 331         torture_assert_ntstatus_ok(tctx,
 332                 dcerpc_svcctl_StartServiceW(p, tctx, &r),
 333                 "StartServiceW failed!");
 334         torture_assert_werr_equal(tctx, r.out.result,
 335                 WERR_SERVICE_ALREADY_RUNNING,
 336                 "StartServiceW failed!");
 337
 338         if (!test_CloseServiceHandle(p, tctx, &s))
 339                 return false;
 340
 341         if (!test_CloseServiceHandle(p, tctx, &h))
 342                 return false;
 343
 344         return true;
 345 }
 346
 347 static bool test_ControlService(struct torture_context *tctx,
 348                                 struct dcerpc_pipe *p)
 349 {
 350         struct svcctl_ControlService r;
 351         struct policy_handle h, s;
 352         struct SERVICE_STATUS service_status;
 353
 354         if (!test_OpenSCManager(p, tctx, &h))
 355                 return false;
 356
 357         if (!test_OpenService(p, tctx, &h, TORTURE_DEFAULT_SERVICE, &s))
 358                 return false;
 359
 360         r.in.handle = &s;
 361         r.in.control = 0;
 362         r.out.service_status = &service_status;
 363
 364         torture_assert_ntstatus_ok(tctx,
 365                 dcerpc_svcctl_ControlService(p, tctx, &r),
 366                 "ControlService failed!");
 367         torture_assert_werr_equal(tctx, r.out.result, WERR_INVALID_PARAM,
 368                 "ControlService failed!");
 369
 370         if (!test_CloseServiceHandle(p, tctx, &s))
 371                 return false;
 372
 373         if (!test_CloseServiceHandle(p, tctx, &h))
 374                 return false;
 375
 376         return true;
 377 }
 378
 379 static bool test_EnumServicesStatus(struct torture_context *tctx, struct dcerpc_pipe *p)
 380 {
 381         struct svcctl_EnumServicesStatusW r;
 382         struct policy_handle h;
 383         int i;
 384         NTSTATUS status;
 385         uint32_t resume_handle = 0;
 386         struct ENUM_SERVICE_STATUSW *service = NULL;
 387         uint32_t needed = 0;
 388         uint32_t services_returned = 0;
 389
 390         if (!test_OpenSCManager(p, tctx, &h))
 391                 return false;
 392
 393         r.in.handle = &h;
 394         r.in.type = SERVICE_TYPE_WIN32;
 395         r.in.state = SERVICE_STATE_ALL;
 396         r.in.offered = 0;
 397         r.in.resume_handle = &resume_handle;
 398         r.out.service = NULL;
 399         r.out.resume_handle = &resume_handle;
 400         r.out.services_returned = &services_returned;
 401         r.out.needed = &needed;
 402
 403         status = dcerpc_svcctl_EnumServicesStatusW(p, tctx, &r);
 404
 405         torture_assert_ntstatus_ok(tctx, status, "EnumServicesStatus failed!");
 406
 407         if (W_ERROR_EQUAL(r.out.result, WERR_MORE_DATA)) {
 408                 r.in.offered = needed;
 409                 r.out.service = talloc_array(tctx, uint8_t, needed);
 410
 411                 status = dcerpc_svcctl_EnumServicesStatusW(p, tctx, &r);
 412
 413                 torture_assert_ntstatus_ok(tctx, status, "EnumServicesStatus failed!");
 414                 torture_assert_werr_ok(tctx, r.out.result, "EnumServicesStatus failed");
 415         }
 416
 417         if (services_returned > 0) {
 418
 419                 enum ndr_err_code ndr_err;
 420                 DATA_BLOB blob;
 421                 struct ndr_pull *ndr;
 422
 423                 blob.length = r.in.offered;
 424                 blob.data = talloc_steal(tctx, r.out.service);
 425
 426                 ndr = ndr_pull_init_blob(&blob, tctx, lp_iconv_convenience(tctx->lp_ctx));
 427
 428                 service = talloc_array(tctx, struct ENUM_SERVICE_STATUSW, services_returned);
 429                 if (!service) {
 430                         return false;
 431                 }
 432
 433                 ndr_err = ndr_pull_ENUM_SERVICE_STATUSW_array(
 434                                 ndr, services_returned, service);
 435                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
 436                         return false;
 437                 }
 438         }
 439
 440         for(i = 0; i < services_returned; i++) {
 441
 442                 torture_assert(tctx, service[i].service_name,
 443                         "Service without name returned!");
 444
 445                 printf("%-20s   \"%s\", Type: %d, State: %d\n",
 446                         service[i].service_name, service[i].display_name,
 447                         service[i].status.type, service[i].status.state);
 448         }
 449
 450         if (!test_CloseServiceHandle(p, tctx, &h))
 451                 return false;
 452
 453         return true;
 454 }
 455
 456 static bool test_EnumDependentServicesW(struct torture_context *tctx,
 457                                         struct dcerpc_pipe *p)
 458 {
 459         struct svcctl_EnumDependentServicesW r;
 460         struct policy_handle h, s;
 461         uint32_t needed;
 462         uint32_t services_returned;
 463         uint32_t i;
 464         uint32_t states[] = { SERVICE_STATE_ACTIVE,
 465                               SERVICE_STATE_INACTIVE,
 466                               SERVICE_STATE_ALL };
 467
 468         if (!test_OpenSCManager(p, tctx, &h))
 469                 return false;
 470
 471         if (!test_OpenService(p, tctx, &h, TORTURE_DEFAULT_SERVICE, &s))
 472                 return false;
 473
 474         r.in.service = &s;
 475         r.in.offered = 0;
 476         r.in.state = 0;
 477         r.out.service_status = NULL;
 478         r.out.services_returned = &services_returned;
 479         r.out.needed = &needed;
 480
 481         torture_assert_ntstatus_ok(tctx,
 482                 dcerpc_svcctl_EnumDependentServicesW(p, tctx, &r),
 483                 "EnumDependentServicesW failed!");
 484
 485         torture_assert_werr_equal(tctx, r.out.result, WERR_INVALID_PARAM,
 486                 "EnumDependentServicesW failed!");
 487
 488         for (i=0; i<ARRAY_SIZE(states); i++) {
 489
 490                 r.in.state = states[i];
 491
 492                 torture_assert_ntstatus_ok(tctx,
 493                         dcerpc_svcctl_EnumDependentServicesW(p, tctx, &r),
 494                         "EnumDependentServicesW failed!");
 495
 496                 if (W_ERROR_EQUAL(r.out.result, WERR_MORE_DATA)) {
 497                         r.in.offered = needed;
 498                         r.out.service_status = talloc_array(tctx, uint8_t, needed);
 499
 500                         torture_assert_ntstatus_ok(tctx,
 501                                 dcerpc_svcctl_EnumDependentServicesW(p, tctx, &r),
 502                                 "EnumDependentServicesW failed!");
 503
 504                 }
 505
 506                 torture_assert_werr_ok(tctx, r.out.result,
 507                         "EnumDependentServicesW failed");
 508         }
 509
 510         if (!test_CloseServiceHandle(p, tctx, &s))
 511                 return false;
 512
 513         if (!test_CloseServiceHandle(p, tctx, &h))
 514                 return false;
 515
 516         return true;
 517 }
 518
 519 static bool test_SCManager(struct torture_context *tctx,
 520                                                    struct dcerpc_pipe *p)
 521 {
 522         struct policy_handle h;
 523
 524         if (!test_OpenSCManager(p, tctx, &h))
 525                 return false;
 526
 527         if (!test_CloseServiceHandle(p, tctx, &h))
 528                 return false;
 529
 530         return true;
 531 }
 532
 533 struct torture_suite *torture_rpc_svcctl(TALLOC_CTX *mem_ctx)
 534 {
 535         struct torture_suite *suite = torture_suite_create(mem_ctx, "SVCCTL");
 536         struct torture_rpc_tcase *tcase;
 537
 538         tcase = torture_suite_add_rpc_iface_tcase(suite, "svcctl", &ndr_table_svcctl);
 539
 540         torture_rpc_tcase_add_test(tcase, "SCManager",
 541                                    test_SCManager);
 542         torture_rpc_tcase_add_test(tcase, "EnumServicesStatus",
 543                                    test_EnumServicesStatus);
 544         torture_rpc_tcase_add_test(tcase, "EnumDependentServicesW",
 545                                    test_EnumDependentServicesW);
 546         torture_rpc_tcase_add_test(tcase, "QueryServiceStatus",
 547                                    test_QueryServiceStatus);
 548         torture_rpc_tcase_add_test(tcase, "QueryServiceStatusEx",
 549                                    test_QueryServiceStatusEx);
 550         torture_rpc_tcase_add_test(tcase, "QueryServiceConfigW",
 551                                    test_QueryServiceConfigW);
 552         torture_rpc_tcase_add_test(tcase, "QueryServiceConfig2W",
 553                                    test_QueryServiceConfig2W);
 554         torture_rpc_tcase_add_test(tcase, "QueryServiceObjectSecurity",
 555                                    test_QueryServiceObjectSecurity);
 556         torture_rpc_tcase_add_test(tcase, "StartServiceW",
 557                                    test_StartServiceW);
 558         torture_rpc_tcase_add_test(tcase, "ControlService",
 559                                    test_ControlService);
 560
 561         return suite;
 562 }