2 * Unix SMB/CIFS implementation.
3 * Group Policy Object Support
4 * Copyright (C) Guenther Deschner 2005-2008
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 3 of the License, or
9 * (at your option) any later version.
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, see <http://www.gnu.org/licenses/>.
29 GP_LINK_LOCAL
= 5 /* for convenience */
33 #define GPO_FLAG_DISABLE 0x00000001
34 #define GPO_FLAG_FORCE 0x00000002
37 #define GPO_LIST_FLAG_MACHINE 0x00000001
38 #define GPO_LIST_FLAG_SITEONLY 0x00000002
40 /* following flags from http://support.microsoft.com/kb/312164/EN-US/ */
41 #define GPO_INFO_FLAG_MACHINE 0x00000001
42 #define GPO_INFO_FLAG_BACKGROUND 0x00000010
43 #define GPO_INFO_FLAG_SLOWLINK 0x00000020
44 #define GPO_INFO_FLAG_VERBOSE 0x00000040
45 #define GPO_INFO_FLAG_NOCHANGES 0x00000080
46 #define GPO_INFO_FLAG_LINKTRANSITION 0x00000100
47 #define GPO_INFO_FLAG_LOGRSOP_TRANSITION 0x00000200
48 #define GPO_INFO_FLAG_FORCED_REFRESH 0x00000400
49 #define GPO_INFO_FLAG_SAFEMODE_BOOT 0x00000800
51 #define GPO_VERSION_USER(x) (x >> 16)
52 #define GPO_VERSION_MACHINE(x) (x & 0xffff)
54 struct GROUP_POLICY_OBJECT
{
55 uint32_t options
; /* GPFLAGS_* */
58 const char *file_sys_path
;
59 const char *display_name
;
62 enum GPO_LINK_TYPE link_type
;
63 const char *user_extensions
;
64 const char *machine_extensions
;
65 struct security_descriptor
*security_descriptor
;
66 struct GROUP_POLICY_OBJECT
*next
, *prev
;
69 /* the following is seen on the DS (see adssearch.pl for details) */
71 /* the type field in a 'gPLink', the same as GPO_FLAG ? */
72 #define GPO_LINK_OPT_NONE 0x00000000
73 #define GPO_LINK_OPT_DISABLED 0x00000001
74 #define GPO_LINK_OPT_ENFORCED 0x00000002
76 /* GPO_LINK_OPT_ENFORCED takes precedence over GPOPTIONS_BLOCK_INHERITANCE */
78 /* 'gPOptions', maybe a bitmask as well */
80 GPOPTIONS_INHERIT
= 0,
81 GPOPTIONS_BLOCK_INHERITANCE
= 1
84 /* 'flags' in a 'groupPolicyContainer' object */
85 #define GPFLAGS_ALL_ENABLED 0x00000000
86 #define GPFLAGS_USER_SETTINGS_DISABLED 0x00000001
87 #define GPFLAGS_MACHINE_SETTINGS_DISABLED 0x00000002
88 #define GPFLAGS_ALL_DISABLED (GPFLAGS_USER_SETTINGS_DISABLED | \
89 GPFLAGS_MACHINE_SETTINGS_DISABLED)
92 const char *gp_link
; /* raw link name */
93 uint32_t gp_opts
; /* inheritance options GPO_INHERIT */
94 uint32_t num_links
; /* number of links */
95 char **link_names
; /* array of parsed link names */
96 uint32_t *link_opts
; /* array of parsed link opts GPO_LINK_OPT_* */
100 const char *gp_extension
; /* raw extension name */
103 char **extensions_guid
;
106 struct GP_EXT
*next
, *prev
;
109 #define GPO_CACHE_DIR "gpo_cache"
110 #define GPT_INI "GPT.INI"
111 #define GPO_REFRESH_INTERVAL 60*90
113 #define GPO_REG_STATE_MACHINE "State\\Machine"
116 GP_REG_ACTION_NONE
= 0,
117 GP_REG_ACTION_ADD_VALUE
= 1,
118 GP_REG_ACTION_ADD_KEY
= 2,
119 GP_REG_ACTION_DEL_VALUES
= 3,
120 GP_REG_ACTION_DEL_VALUE
= 4,
121 GP_REG_ACTION_DEL_ALL_VALUES
= 5,
122 GP_REG_ACTION_DEL_KEYS
= 6,
123 GP_REG_ACTION_SEC_KEY_SET
= 7,
124 GP_REG_ACTION_SEC_KEY_RESET
= 8
127 struct gp_registry_entry
{
128 enum gp_reg_action action
;
131 struct registry_value
*data
;
134 struct gp_registry_value
{
136 struct registry_value
*data
;
139 struct gp_registry_entry2
{
140 enum gp_reg_action action
;
143 struct gp_registry_value
**values
;
146 struct gp_registry_entries
{
148 struct gp_registry_entry
**entries
;
151 struct gp_registry_context
{
152 const struct nt_user_token
*token
;
154 struct registry_key
*curr_key
;
157 #define GP_EXT_GUID_SECURITY "827D319E-6EAC-11D2-A4EA-00C04F79F83A"
158 #define GP_EXT_GUID_REGISTRY "35378EAC-683F-11D2-A89A-00C04FBBCFA2"
159 #define GP_EXT_GUID_SCRIPTS "42B5FAAE-6536-11D2-AE5A-0000F87571E3"
160 #define ADS_EXTENDED_RIGHT_APPLY_GROUP_POLICY "edacfd8f-ffb3-11d1-b41d-00a0c968f939"
163 #include "../libgpo/gpext/gpext.h"