4 * Copyright (C) 2005 Robert Shearman
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
21 extern const LUID SeIncreaseQuotaPrivilege
;
22 extern const LUID SeSecurityPrivilege
;
23 extern const LUID SeTakeOwnershipPrivilege
;
24 extern const LUID SeLoadDriverPrivilege
;
25 extern const LUID SeSystemProfilePrivilege
;
26 extern const LUID SeSystemtimePrivilege
;
27 extern const LUID SeProfileSingleProcessPrivilege
;
28 extern const LUID SeIncreaseBasePriorityPrivilege
;
29 extern const LUID SeCreatePagefilePrivilege
;
30 extern const LUID SeBackupPrivilege
;
31 extern const LUID SeRestorePrivilege
;
32 extern const LUID SeShutdownPrivilege
;
33 extern const LUID SeDebugPrivilege
;
34 extern const LUID SeSystemEnvironmentPrivilege
;
35 extern const LUID SeChangeNotifyPrivilege
;
36 extern const LUID SeRemoteShutdownPrivilege
;
37 extern const LUID SeUndockPrivilege
;
38 extern const LUID SeManageVolumePrivilege
;
39 extern const LUID SeImpersonatePrivilege
;
40 extern const LUID SeCreateGlobalPrivilege
;
42 extern const PSID security_interactive_sid
;
47 extern struct token
*token_create_admin(void);
48 extern struct token
*token_duplicate( struct token
*src_token
, unsigned primary
,
49 SECURITY_IMPERSONATION_LEVEL impersonation_level
);
50 extern int token_check_privileges( struct token
*token
, int all_required
,
51 const LUID_AND_ATTRIBUTES
*reqprivs
,
52 unsigned int count
, LUID_AND_ATTRIBUTES
*usedprivs
);
53 extern const ACL
*token_get_default_dacl( struct token
*token
);
54 extern const SID
*token_get_user( struct token
*token
);
55 extern const SID
*token_get_primary_group( struct token
*token
);
57 extern void security_set_thread_token( struct thread
*thread
, obj_handle_t handle
);
58 extern int check_object_access( struct object
*obj
, unsigned int *access
);
60 static inline int thread_single_check_privilege( struct thread
*thread
, const LUID
*priv
)
62 struct token
*token
= thread_get_impersonation_token( thread
);
63 const LUID_AND_ATTRIBUTES privs
= { *priv
, 0 };
65 if (!token
) return FALSE
;
67 return token_check_privileges( token
, TRUE
, &privs
, 1, NULL
);
71 /* security descriptor helper functions */
73 extern int sd_is_valid( const struct security_descriptor
*sd
, data_size_t size
);
75 /* gets the discretionary access control list from a security descriptor */
76 static inline const ACL
*sd_get_dacl( const struct security_descriptor
*sd
, int *present
)
78 *present
= (sd
->control
& SE_DACL_PRESENT
? TRUE
: FALSE
);
81 return (const ACL
*)((const char *)(sd
+ 1) +
82 sd
->owner_len
+ sd
->group_len
+ sd
->sacl_len
);
87 /* gets the system access control list from a security descriptor */
88 static inline const ACL
*sd_get_sacl( const struct security_descriptor
*sd
, int *present
)
90 *present
= (sd
->control
& SE_SACL_PRESENT
? TRUE
: FALSE
);
93 return (const ACL
*)((const char *)(sd
+ 1) +
94 sd
->owner_len
+ sd
->group_len
);
99 /* gets the owner from a security descriptor */
100 static inline const SID
*sd_get_owner( const struct security_descriptor
*sd
)
103 return (const SID
*)(sd
+ 1);
108 /* gets the primary group from a security descriptor */
109 static inline const SID
*sd_get_group( const struct security_descriptor
*sd
)
112 return (const SID
*)((const char *)(sd
+ 1) + sd
->owner_len
);