uipriv.c File Reference

#include <nt.h>
#include <ntrtl.h>
#include <stdio.h>
#include <string.h>

Go to the source code of this file.

Defines
#define	SHIFT(c, v)   {c--; v++;}
Functions
VOID	Usage (VOID)
BOOLEAN	OpenAppropriateToken (OUT PHANDLE Token)
VOID	EnableAllPrivileges (VOID)
VOID	ResetAllPrivileges (VOID)
VOID	DisableAllPrivileges (VOID)
int	PrivMain (IN int c, IN PCHAR v[])
Variables
BOOLEAN	SwitchEnable = FALSE
BOOLEAN	SwitchDisable = FALSE
BOOLEAN	SwitchReset = FALSE
BOOLEAN	SwitchAll = FALSE

---

Define Documentation

#define SHIFT (  c, v   )     {c--; v++;}

Definition at line 53 of file uipriv.c. Referenced by GetMouseKeyState(), InitSKT1ButtonPos(), PrivMain(), and SKC1MousePosition().

---

Function Documentation

VOID DisableAllPrivileges (  VOID   )

Definition at line 432 of file uipriv.c. References ASSERT, NT_INFORMATION, NT_SUCCESS, NtAdjustPrivilegesToken(), NtClose(), NTSTATUS(), NULL, OpenAppropriateToken(), Status, Token, and TRUE. Referenced by NtAdjustPrivilegesToken(), PrivMain(), and SepAdjustPrivileges(). : This routine disables all privileges in the token. Arguments: None. Return Value: None. --*/ { ULONG IgnoredReturnLength; HANDLE Token; NTSTATUS Status; if ( !OpenAppropriateToken(&Token) ) { printf( "\n"); printf( "\n"); printf( "You are not allowed to change your own privilege settings.\n"); printf( "Operation failed.\n"); return; } // // Disable all the privileges. // Status = NtAdjustPrivilegesToken( Token, // TokenHandle TRUE, // DisableAllPrivileges NULL, // NewState (OPTIONAL) 0, // BufferLength NULL, // PreviousState (OPTIONAL) &IgnoredReturnLength // ReturnLength ); ASSERT( NT_SUCCESS(Status) || NT_INFORMATION(Status) ); Status = NtClose( Token ); return; }

VOID EnableAllPrivileges (  VOID   )

Definition at line 225 of file uipriv.c. References ASSERT, FALSE, Index, NT_INFORMATION, NT_SUCCESS, NtAdjustPrivilegesToken(), NtClose(), NtQueryInformationToken(), NTSTATUS(), NULL, OpenAppropriateToken(), RtlAllocateHeap, RtlFreeHeap, Status, and Token. Referenced by PrivMain(). : This routine enables all privileges in the token. Arguments: None. Return Value: None. --*/ { NTSTATUS Status; HANDLE Token; ULONG ReturnLength, Index; PTOKEN_PRIVILEGES NewState; if ( !OpenAppropriateToken(&Token) ) { return; } // // Get the size needed to query current privilege settings... // Status = NtQueryInformationToken( Token, // TokenHandle TokenPrivileges, // TokenInformationClass NewState, // TokenInformation 0, // TokenInformationLength &ReturnLength // ReturnLength ); ASSERT( Status == STATUS_BUFFER_TOO_SMALL ); NewState = RtlAllocateHeap( RtlProcessHeap(), 0, ReturnLength ); ASSERT( NewState != NULL ); Status = NtQueryInformationToken( Token, // TokenHandle TokenPrivileges, // TokenInformationClass NewState, // TokenInformation ReturnLength, // TokenInformationLength &ReturnLength // ReturnLength ); ASSERT( NT_SUCCESS(Status) || NT_INFORMATION(Status) ); // // Set the state settings so that all privileges are enabled... // if (NewState->PrivilegeCount > 0) { Index = NewState->PrivilegeCount; while (Index < NewState->PrivilegeCount) { NewState->Privileges[Index].Attributes = SE_PRIVILEGE_ENABLED; Index += 1; } } // // Change the settings in the token... // Status = NtAdjustPrivilegesToken( Token, // TokenHandle FALSE, // DisableAllPrivileges NewState, // NewState (OPTIONAL) ReturnLength, // BufferLength NULL, // PreviousState (OPTIONAL) &ReturnLength // ReturnLength ); ASSERT( NT_SUCCESS(Status) || NT_INFORMATION(Status) ); RtlFreeHeap( RtlProcessHeap(), 0, NewState ); Status = NtClose( Token ); return; }

BOOLEAN OpenAppropriateToken (  OUT PHANDLE  Token  )

Definition at line 148 of file uipriv.c. References FALSE, NT_SUCCESS, NtClose(), NtOpenProcess(), NtOpenProcessToken(), NTSTATUS(), NULL, Status, Token, and TRUE. Referenced by DisableAllPrivileges(), EnableAllPrivileges(), and ResetAllPrivileges(). : This routine opens the appropriate TOKEN object. For an internal command, this is the current process's token. If this command is ever made external, then it will be the parent process's token. If the token can't be openned, then a messages is printed indicating a problem has been encountered. The caller is expected to close this token when no longer needed. Arguments: Token - Receives the handle value of the openned token. Return Value: TRUE - Indicates the token was successfully openned. FALSE - Indicates the token was NOT successfully openned. --*/ { NTSTATUS Status, IgnoreStatus; OBJECT_ATTRIBUTES ProcessAttributes; HANDLE Process; PTEB CurrentTeb; CurrentTeb = NtCurrentTeb(); InitializeObjectAttributes(&ProcessAttributes, NULL, 0, NULL, NULL); Status = NtOpenProcess( &Process, // TargetHandle PROCESS_QUERY_INFORMATION, // DesiredAccess &ProcessAttributes, // ObjectAttributes &CurrentTeb->ClientId // ClientId ); if (NT_SUCCESS(Status)) { Status = NtOpenProcessToken( Process, TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, Token ); IgnoreStatus = NtClose( Process ); if ( NT_SUCCESS(Status) ) { return TRUE; } } printf( "\n"); printf( "\n"); printf( "You are not allowed to change your own privilege settings.\n"); printf( "Operation failed.\n"); return FALSE; }

int PrivMain (  IN int  c, IN PCHAR  v[] )

Definition at line 486 of file uipriv.c. References c, CHAR, DisableAllPrivileges(), EnableAllPrivileges(), ResetAllPrivileges(), SHIFT, SwitchAll, SwitchDisable, SwitchEnable, SwitchReset, TRUE, and Usage(). 00493 : 00494 00495 This routine is the main entry routine for the "priv" command. 00496 00497 Arguments: 00498 00499 TBS 00500 00501 Return Value: 00502 00503 TBS 00504 00505 --*/ 00506 { 00507 PCHAR p; 00508 CHAR ch; 00509 ULONG DispositionDirectives; 00510 00511 00512 try { 00513 DispositionDirectives = 0; 00514 SHIFT (c,v); 00515 while ((c > 0) && ((ch = *v[0]))) { 00516 p = *v; 00517 if (ch == '/') { 00518 while (*++p != '\0') { 00519 if (*p == 'E') { 00520 SwitchEnable = TRUE; 00521 DispositionDirectives += 1; 00522 } 00523 if (*p == 'D') { 00524 SwitchDisable = TRUE; 00525 DispositionDirectives += 1; 00526 } 00527 if (*p == 'R') { 00528 SwitchReset = TRUE; 00529 DispositionDirectives += 1; 00530 } 00531 else if (*p == 'A') { 00532 SwitchAll = TRUE; 00533 } 00534 else { 00535 Usage(); 00536 } 00537 } 00538 SHIFT(c,v); 00539 } 00540 } 00541 00542 // 00543 // Make sure we don't have conflicting parameters 00544 // 00545 // Rules: 00546 // 00547 // If /A isn't specified, then a privilege name must be. 00548 // Exactly one of /E, /D, and /R must be specified. 00549 // 00550 // 00551 00552 00553 if (!SwitchAll && (c == 0)) { 00554 printf( "\n"); 00555 printf( "\n"); 00556 printf( "You must provide privilege name or use the /A switch.\n"); 00557 Usage(); 00558 return ( 0 ); 00559 } 00560 00561 if (DispositionDirectives != 1) { 00562 printf( "\n"); 00563 printf( "\n"); 00564 printf( "You must provide one and only one of the following"); 00565 printf( "switches: /E, /D, /R\n"); 00566 Usage(); 00567 return ( 0 ); 00568 00569 } 00570 00571 00572 // 00573 // Everything appears legitimate 00574 // 00575 00576 if (SwitchAll) { 00577 00578 // 00579 // /A switch specified 00580 // 00581 00582 if (SwitchEnable) { 00583 EnableAllPrivileges(); 00584 } 00585 else if (SwitchDisable) { 00586 DisableAllPrivileges(); 00587 } 00588 else { 00589 ResetAllPrivileges(); 00590 } 00591 } 00592 00593 // 00594 // privilege name specified... 00595 // 00596 00597 else { 00598 printf( "\n"); 00599 printf( "I'm sorry, but due to the lack of time and interest,\n"); 00600 printf( "individual privilege selection is not yet supported.\n"); 00601 printf( "Please use the /A qualifier for the time being.\n"); 00602 printf( "\n"); 00603 } 00604 00605 } finally { 00606 return ( 0 ); 00607 } 00608 00609 return( 0 ); 00610 00611 } }

VOID ResetAllPrivileges (  VOID   )

Definition at line 322 of file uipriv.c. References ASSERT, FALSE, Index, NT_INFORMATION, NT_SUCCESS, NtAdjustPrivilegesToken(), NtClose(), NtQueryInformationToken(), NTSTATUS(), NULL, OpenAppropriateToken(), RtlAllocateHeap, RtlFreeHeap, Status, and Token. Referenced by PrivMain(). : This routine resets all privileges in the token to their default state. Arguments: None. Return Value: None. --*/ { NTSTATUS Status; HANDLE Token; ULONG ReturnLength, Index; PTOKEN_PRIVILEGES NewState; if ( !OpenAppropriateToken(&Token) ) { printf( "\n"); printf( "\n"); printf( "You are not allowed to change your own privilege settings.\n"); printf( "Operation failed.\n"); return; } // // Get the size needed to query current privilege settings... // Status = NtQueryInformationToken( Token, // TokenHandle TokenPrivileges, // TokenInformationClass NewState, // TokenInformation 0, // TokenInformationLength &ReturnLength // ReturnLength ); ASSERT( STATUS_BUFFER_TOO_SMALL ); NewState = RtlAllocateHeap( RtlProcessHeap(), 0, ReturnLength ); ASSERT( NewState != NULL ); Status = NtQueryInformationToken( Token, // TokenHandle TokenPrivileges, // TokenInformationClass NewState, // TokenInformation ReturnLength, // TokenInformationLength &ReturnLength // ReturnLength ); ASSERT( NT_SUCCESS(Status) || NT_INFORMATION(Status) ); // // Set the state settings so that all privileges are reset to // their default settings... // if (NewState->PrivilegeCount > 0) { Index = NewState->PrivilegeCount; while (Index < NewState->PrivilegeCount) { if (NewState->Privileges[Index].Attributes == SE_PRIVILEGE_ENABLED_BY_DEFAULT) { NewState->Privileges[Index].Attributes = SE_PRIVILEGE_ENABLED; } else { NewState->Privileges[Index].Attributes = 0; } Index += 1; } } // // Change the settings in the token... // Status = NtAdjustPrivilegesToken( Token, // TokenHandle FALSE, // DisableAllPrivileges NewState, // NewState (OPTIONAL) ReturnLength, // BufferLength NULL, // PreviousState (OPTIONAL) &ReturnLength // ReturnLength ); ASSERT( NT_SUCCESS(Status) || NT_INFORMATION(Status) ); RtlFreeHeap( RtlProcessHeap(), 0, NewState ); Status = NtClose( Token ); return; }

VOID Usage (  VOID   )

Definition at line 90 of file uclient.c. { fprintf( stderr, "usage: UCLIENT ClientNumber [#threads]\n" ); ExitProcess( 1 ); }

---

Variable Documentation

BOOLEAN SwitchAll = FALSE

Definition at line 50 of file uipriv.c. Referenced by PrivMain().

BOOLEAN SwitchDisable = FALSE

Definition at line 48 of file uipriv.c. Referenced by PrivMain().

BOOLEAN SwitchEnable = FALSE

Definition at line 47 of file uipriv.c. Referenced by PrivMain().

BOOLEAN SwitchReset = FALSE

Definition at line 49 of file uipriv.c. Referenced by PrivMain().

---