security.c File Reference

#include "precomp.h"

Go to the source code of this file.

Defines
#define	_SECURITY   1
Functions
PACCESS_ALLOWED_ACE	AllocAce (PACCESS_ALLOWED_ACE pace, BYTE bType, BYTE bFlags, ACCESS_MASK am, PSID psid, LPDWORD lpdwLength)
PSECURITY_DESCRIPTOR	CreateSecurityDescriptor (PACCESS_ALLOWED_ACE paceList, DWORD cbAce, BOOLEAN fDaclDefaulted)
BOOL	InitSecurity (VOID)
NTSTATUS	TestForInteractiveUser (PLUID pluidCaller)
NTSTATUS	_UserTestForWinStaAccess (PUNICODE_STRING pstrWinSta, BOOL fInherit)
BOOL	CheckGrantedAccess (ACCESS_MASK amGranted, ACCESS_MASK amRequest)
BOOL	CheckWinstaWriteAttributesAccess (void)
BOOL	AccessCheckObject (PVOID pobj, ACCESS_MASK amRequest, KPROCESSOR_MODE AccessMode, CONST GENERIC_MAPPING *pGenericMapping)
BOOL	IsPrivileged (PPRIVILEGE_SET ppSet)
BOOL	_GetUserObjectInformation (HANDLE h, int nIndex, PVOID ccxpvInfo, DWORD nLength, LPDWORD lpnLengthNeeded)
BOOL	_SetUserObjectInformation (HANDLE h, int nIndex, PVOID ccxpvInfo, DWORD nLength)
BOOL FASTCALL	UserScreenAccessCheck (VOID)
Variables
PSECURITY_DESCRIPTOR	gpsdInitWinSta
PRIVILEGE_SET	psTcb

---

Define Documentation

#define _SECURITY   1

Definition at line 13 of file w32/ntuser/kernel/security.c.

---

Function Documentation

BOOL _GetUserObjectInformation (  HANDLE  h, int  nIndex, PVOID  ccxpvInfo, DWORD  nLength, LPDWORD  lpnLengthNeeded )

Definition at line 626 of file w32/ntuser/kernel/security.c. References BOOL, CheckHandleFlag(), DWORD, ExDesktopObjectType, ExWindowStationObjectType, FALSE, _OBJECT_HANDLE_INFORMATION::HandleAttributes, HF_DESKTOPHOOK, LogDesktop, _OBJECT_TYPE::Name, NT_SUCCESS, NTSTATUS(), NULL, ObDereferenceObject, OBJECT_TO_OBJECT_HEADER, ObReferenceObjectByHandle(), PBYTE, POBJECT_NAME, tagWINDOWSTATION::psidUser, PtiCurrentShared, RtlLengthSid(), Status, TRUE, _OBJECT_HEADER::Type, UserMode, and WSF_NOIO. Referenced by NtUserGetObjectInformation(). { PUSEROBJECTFLAGS puof; BOOL fSuccess = TRUE; PVOID pObject; POBJECT_HEADER pHead; DWORD dwLengthNeeded = 0; OBJECT_HANDLE_INFORMATION ohi; PUNICODE_STRING pstrInfo; PWINDOWSTATION pwinsta; NTSTATUS Status; /* * Validate the object */ Status = ObReferenceObjectByHandle( h, 0, NULL, UserMode, // this is always called from the client side &pObject, &ohi); if (!NT_SUCCESS(Status)) { RIPNTERR0(Status, RIP_VERBOSE, "ObReferenceObjectByHandle Failed"); return FALSE; } pHead = OBJECT_TO_OBJECT_HEADER(pObject); if (pHead->Type != *ExWindowStationObjectType && pHead->Type != *ExDesktopObjectType) { RIPERR0(ERROR_INVALID_FUNCTION, RIP_WARNING, "Object is not a USER object"); ObDereferenceObject(pObject); return FALSE; } #ifdef LOGDESKTOPLOCKS if (OBJECT_TO_OBJECT_HEADER(pObject)->Type == *ExDesktopObjectType) { LogDesktop(pObject, LD_REF_FN_GETUSEROBJECTINFORMATION, TRUE, (ULONG_PTR)PtiCurrentShared()); } #endif try { switch (nIndex) { case UOI_FLAGS: dwLengthNeeded = sizeof(USEROBJECTFLAGS); if (nLength < sizeof(USEROBJECTFLAGS)) { RIPERR0(ERROR_INSUFFICIENT_BUFFER, RIP_VERBOSE, ""); fSuccess = FALSE; break; } puof = ccxpvInfo; puof->fInherit = (ohi.HandleAttributes & OBJ_INHERIT) ? TRUE : FALSE; puof->fReserved = 0; puof->dwFlags = 0; if (pHead->Type == *ExDesktopObjectType) { if (CheckHandleFlag(h, HF_DESKTOPHOOK)) puof->dwFlags |= DF_ALLOWOTHERACCOUNTHOOK; } else { if (!(((PWINDOWSTATION)pObject)->dwWSF_Flags & WSF_NOIO)) puof->dwFlags |= WSF_VISIBLE; } break; case UOI_NAME: pstrInfo = POBJECT_NAME(pObject); goto docopy; case UOI_TYPE: pstrInfo = &pHead->Type->Name; docopy: if (pstrInfo) { dwLengthNeeded = pstrInfo->Length + sizeof(WCHAR); if (dwLengthNeeded > nLength) { RIPERR0(ERROR_INSUFFICIENT_BUFFER, RIP_VERBOSE, ""); fSuccess = FALSE; break; } RtlCopyMemory(ccxpvInfo, pstrInfo->Buffer, pstrInfo->Length); *(PWCHAR)((PBYTE)ccxpvInfo + pstrInfo->Length) = 0; } else { dwLengthNeeded = 0; } break; case UOI_USER_SID: if (pHead->Type == *ExWindowStationObjectType) pwinsta = pObject; else pwinsta = ((PDESKTOP)pObject)->rpwinstaParent; if (pwinsta->psidUser == NULL) { dwLengthNeeded = 0; } else { dwLengthNeeded = RtlLengthSid(pwinsta->psidUser); if (dwLengthNeeded > nLength) { RIPERR0(ERROR_INSUFFICIENT_BUFFER, RIP_VERBOSE, ""); fSuccess = FALSE; break; } RtlCopyMemory(ccxpvInfo, pwinsta->psidUser, dwLengthNeeded); } break; default: RIPERR0(ERROR_INVALID_PARAMETER, RIP_VERBOSE, ""); fSuccess = FALSE; break; } } except (W32ExceptionHandler(TRUE, RIP_WARNING)) { fSuccess = FALSE; } *lpnLengthNeeded = dwLengthNeeded; #ifdef LOGDESKTOPLOCKS if (OBJECT_TO_OBJECT_HEADER(pObject)->Type == *ExDesktopObjectType) { LogDesktop(pObject, LD_DEREF_FN_GETUSEROBJECTINFORMATION, FALSE, (ULONG_PTR)PtiCurrentShared()); } #endif ObDereferenceObject(pObject); return fSuccess; }

BOOL _SetUserObjectInformation (  HANDLE  h, int  nIndex, PVOID  ccxpvInfo, DWORD  nLength )

Definition at line 764 of file w32/ntuser/kernel/security.c. References BOOL, DWORD, ExDesktopObjectType, ExWindowStationObjectType, FALSE, HF_DESKTOPHOOK, LogDesktop, NT_SUCCESS, NTSTATUS(), NULL, ObDereferenceObject, OBJECT_TO_OBJECT_HEADER, ObReferenceObjectByHandle(), PtiCurrent, SetHandleFlag(), Status, TRUE, _OBJECT_HEADER::Type, and UserMode. Referenced by NtUserSetObjectInformation(). { PUSEROBJECTFLAGS puof; BOOL fSuccess = TRUE; PVOID pObject; POBJECT_HEADER pHead; DWORD dwLengthNeeded = 0; OBJECT_HANDLE_INFORMATION ohi; OBJECT_HANDLE_FLAG_INFORMATION ofi; NTSTATUS Status; /* * Validate the object */ Status = ObReferenceObjectByHandle( h, 0, NULL, UserMode, // this is always called from the client side &pObject, &ohi); if (!NT_SUCCESS(Status)) { RIPNTERR0(Status, RIP_VERBOSE, "ObReferenceObjectByHandle Failed"); return FALSE; } pHead = OBJECT_TO_OBJECT_HEADER(pObject); if (pHead->Type != *ExWindowStationObjectType && pHead->Type != *ExDesktopObjectType) { RIPERR0(ERROR_INVALID_FUNCTION, RIP_WARNING, "Object is not a USER object"); ObDereferenceObject(pObject); return FALSE; } #ifdef LOGDESKTOPLOCKS if (OBJECT_TO_OBJECT_HEADER(pObject)->Type == *ExDesktopObjectType) { LogDesktop(pObject, LD_REF_FN_SETUSEROBJECTINFORMATION, TRUE, (ULONG_PTR)PtiCurrent()); } #endif try { switch (nIndex) { case UOI_FLAGS: if (nLength < sizeof(USEROBJECTFLAGS)) { RIPERR0(ERROR_INVALID_DATA, RIP_VERBOSE, ""); fSuccess = FALSE; break; } puof = ccxpvInfo; ZwQueryObject(h, ObjectHandleFlagInformation, &ofi, sizeof(ofi), NULL); ofi.Inherit = (puof->fInherit != FALSE); ZwSetInformationObject(h, ObjectHandleFlagInformation, &ofi, sizeof(ofi)); if (pHead->Type == *ExDesktopObjectType) { SetHandleFlag(h, HF_DESKTOPHOOK, puof->dwFlags & DF_ALLOWOTHERACCOUNTHOOK); } break; default: RIPERR0(ERROR_INVALID_PARAMETER, RIP_VERBOSE, ""); fSuccess = FALSE; break; } } except (W32ExceptionHandler(TRUE, RIP_WARNING)) { fSuccess = FALSE; } #ifdef LOGDESKTOPLOCKS if (OBJECT_TO_OBJECT_HEADER(pObject)->Type == *ExDesktopObjectType) { LogDesktop(pObject, LD_DEREF_FN_SETUSEROBJECTINFORMATION, FALSE, (ULONG_PTR)PtiCurrent()); } #endif ObDereferenceObject(pObject); return fSuccess; }

NTSTATUS _UserTestForWinStaAccess (  PUNICODE_STRING  pstrWinSta, BOOL  fInherit )

Definition at line 295 of file w32/ntuser/kernel/security.c. References _OpenWindowStation(), AccessCheckObject(), CheckCritIn, DEFAULT_WINSTA, FALSE, gbSecureDesktop, grpWinStaList, KernelMode, KPROCESSOR_MODE, luidSystem, tagWINDOWSTATION::luidUser, NT_SUCCESS, NTSTATUS(), NULL, OpenEffectiveToken(), PBYTE, RtlEqualLuid(), RtlEqualUnicodeString(), RtlInitUnicodeString(), Status, TRUE, UserMode, and WinStaMapping. Referenced by xxxResolveDesktop(). { PTOKEN_STATISTICS pStats; ULONG BytesRequired; PWINDOWSTATION pwinsta; HWINSTA hwsta = NULL; OBJECT_ATTRIBUTES ObjAttr; POBJECT_ATTRIBUTES pObjAttr = NULL; PUNICODE_STRING pstrStatic; NTSTATUS Status = STATUS_SUCCESS; SIZE_T cbObjA; UNICODE_STRING strDefWinSta; HANDLE htoken; CheckCritIn(); UserAssert(NtCurrentTeb()); UserAssert(pstrWinSta->Buffer == NtCurrentTeb()->StaticUnicodeBuffer); /* * If we are testing against Default WindowStation (WinSta0) retreive * pwinsta from the top of the grpwinstaList instead of doing an * OpenWindowStation() * * !!! * * This relies on the fact that there is only ONE interactive * windowstation and that it is the first one in the list. * If multiple windowstations are ever supported * a lookup will have to be done instead. */ RtlInitUnicodeString(&strDefWinSta, DEFAULT_WINSTA); if (RtlEqualUnicodeString(pstrWinSta, &strDefWinSta, TRUE)) { if (!NT_SUCCESS(Status = OpenEffectiveToken(&htoken))) { return Status; } Status = ZwQueryInformationToken( htoken, // Handle TokenStatistics, // TokenInformationClass NULL, // TokenInformation 0, // TokenInformationLength &BytesRequired // ReturnLength ); if (Status != STATUS_BUFFER_TOO_SMALL) { ZwClose(htoken); return Status; } // // Allocate space for the user info // pStats = (PTOKEN_STATISTICS)UserAllocPoolWithQuota(BytesRequired, TAG_SECURITY); if (pStats == NULL) { Status = STATUS_NO_MEMORY; ZwClose(htoken); return Status; } // // Read in the user info // if (!NT_SUCCESS(Status = ZwQueryInformationToken( htoken, // Handle TokenStatistics, // TokenInformationClass pStats, // TokenInformation BytesRequired, // TokenInformationLength &BytesRequired // ReturnLength ))) { ZwClose(htoken); UserFreePool(pStats); return Status; } /* * Make sure that current process has access to this window station */ Status = STATUS_ACCESS_DENIED; if (grpWinStaList != NULL) { /* * !!! * * This relies on the fact that there is only ONE interactive * windowstation and that it is the first one in the list. * If multiple windowstations are ever supported * a lookup will have to be done here. */ pwinsta = grpWinStaList; /* * For now we will just do the user luid test till we figure out * what fInherit means for a Multi-User system */ if (fInherit) { if ( (RtlEqualLuid(&pStats->AuthenticationId, &pwinsta->luidUser)) || (RtlEqualLuid(&pStats->AuthenticationId, &luidSystem)) || (AccessCheckObject(pwinsta, GENERIC_EXECUTE, (KPROCESSOR_MODE)(gbSecureDesktop ? UserMode : KernelMode), &WinStaMapping)) ) { Status = STATUS_SUCCESS; } } else { /* Bug 42905. Service Controller clears the flag * ScStartupInfo.dwFlags &= (~STARTF_DESKTOPINHERIT) to make services * running under the context of system non-interactive. Hence if fInherit * is false don't do the SystemLuid and AccessCheckObject tests. */ if (RtlEqualLuid(&pStats->AuthenticationId, &pwinsta->luidUser)) { Status = STATUS_SUCCESS; } } } ZwClose(htoken); UserFreePool(pStats); return Status; } if (gbSecureDesktop) { /* * Since we don't have a pointer to the WindowStation Object we will do * a OpenWindowStation() to make sure we have the desired access. */ cbObjA = sizeof(*pObjAttr) + sizeof(*pstrStatic); Status = ZwAllocateVirtualMemory(NtCurrentProcess(), &pObjAttr, 0, &cbObjA, MEM_COMMIT, PAGE_READWRITE); pstrStatic = (PUNICODE_STRING)((PBYTE)pObjAttr + sizeof(*pObjAttr)); if (NT_SUCCESS(Status)) { /* * Note -- the string must be in client-space or the * address validation in OpenWindowStation will fail. * * This code is called from xxxResolveDesktop and the buffer of the passed-in string * is in the teb already. */ try { *pstrStatic = *pstrWinSta; InitializeObjectAttributes( pObjAttr, pstrStatic, OBJ_CASE_INSENSITIVE, NULL, NULL ); } except (W32ExceptionHandler(FALSE, RIP_WARNING)) { Status = GetExceptionCode(); } if (NT_SUCCESS(Status)) { hwsta = _OpenWindowStation(pObjAttr, GENERIC_EXECUTE, UserMode); } } else { return Status; } if (pObjAttr != NULL) { ZwFreeVirtualMemory(NtCurrentProcess(), &pObjAttr, &cbObjA, MEM_RELEASE); } } else { InitializeObjectAttributes( &ObjAttr, pstrWinSta, OBJ_CASE_INSENSITIVE, NULL, NULL ); hwsta = _OpenWindowStation(&ObjAttr, GENERIC_EXECUTE, KernelMode); } if (!hwsta) { return STATUS_ACCESS_DENIED; } Status = ZwClose(hwsta); UserAssert(NT_SUCCESS(Status)); return Status; }

BOOL AccessCheckObject (  PVOID  pobj, ACCESS_MASK  amRequest, KPROCESSOR_MODE  AccessMode, CONST GENERIC_MAPPING *  pGenericMapping )

Definition at line 555 of file w32/ntuser/kernel/security.c. References BOOL, KeyMapping, NTSTATUS(), ObCheckObjectAccess(), SeCreateAccessState(), SeDeleteAccessState(), Status, and TRUE. Referenced by _BuildNameList(), _UserTestForWinStaAccess(), OpenCacheKeyEx(), ReferenceWindowStation(), and xxxMouseEventDirect(). { NTSTATUS Status; ACCESS_STATE AccessState; BOOLEAN fAccessGranted; AUX_ACCESS_DATA AuxData; BOOLEAN bMutexLocked = (pGenericMapping == (&KeyMapping)); /* * Due to a resource problem in the object manager, we must pass in a TRUE * when checking access for registry keys, even if we do not explicitly have * the object type mutex. If we do not, we can get into a deadlock situation with this mutex * and the CmpRegistry lock. */ SeCreateAccessState(&AccessState, &AuxData, amRequest, (PGENERIC_MAPPING)pGenericMapping); fAccessGranted = ObCheckObjectAccess( pobj, &AccessState, bMutexLocked, AccessMode, &Status); SeDeleteAccessState(&AccessState); return (BOOL)(fAccessGranted == TRUE); }

PACCESS_ALLOWED_ACE AllocAce (  PACCESS_ALLOWED_ACE  pace, BYTE  bType, BYTE  bFlags, ACCESS_MASK  am, PSID  psid, LPDWORD  lpdwLength )

Definition at line 37 of file w32/ntuser/kernel/security.c. References DWORD, NULL, PBYTE, RtlCopySid(), RtlLengthSid(), and USHORT. Referenced by InitSecurity(), and xxxConnectService(). { PACCESS_ALLOWED_ACE paceNew; DWORD iEnd; DWORD dwLength, dwLengthSid; /* * Allocate space for the ACE. */ dwLengthSid = RtlLengthSid(psid); dwLength = dwLengthSid + sizeof(ACE_HEADER) + sizeof(ACCESS_MASK); if (pace == NULL) { iEnd = 0; pace = UserAllocPoolWithQuota(dwLength, TAG_SECURITY); if (pace == NULL) return NULL; } else { iEnd = *lpdwLength; paceNew = UserAllocPoolWithQuota(iEnd + dwLength, TAG_SECURITY); if (paceNew == NULL) return NULL; RtlCopyMemory(paceNew, pace, iEnd); UserFreePool(pace); pace = paceNew; } *lpdwLength = dwLength + iEnd; /* * Insert the new ACE. */ paceNew = (PACCESS_ALLOWED_ACE)((PBYTE)pace + iEnd); paceNew->Header.AceType = bType; paceNew->Header.AceSize = (USHORT)dwLength; paceNew->Header.AceFlags = bFlags; paceNew->Mask = am; RtlCopySid(dwLengthSid, &paceNew->SidStart, psid); return pace; }

BOOL CheckGrantedAccess (  ACCESS_MASK  amGranted, ACCESS_MASK  amRequest )

Definition at line 492 of file w32/ntuser/kernel/security.c. References BOOL, FALSE, RtlAreAllAccessesGranted(), and TRUE. Referenced by NtUserGetCaretBlinkTime(), NtUserGetDoubleClickTime(), and xxxMouseEventDirect(). { /* * Check the granted access. */ if (!RtlAreAllAccessesGranted(amGranted, amRequest)) { RIPERR0(ERROR_ACCESS_DENIED, RIP_VERBOSE, ""); return FALSE; } return TRUE; }

BOOL CheckWinstaWriteAttributesAccess (  void   )

Definition at line 518 of file w32/ntuser/kernel/security.c. References tagPROCESSINFO::amwinsta, BOOL, FALSE, gpidLogon, PpiCurrent, PsGetCurrentProcess, RtlAreAllAccessesGranted(), and TRUE. Referenced by _RegisterHotKey(), _SetCaretBlinkTime(), _SetDoubleClickTime(), xxxSetSysColors(), xxxSystemParametersInfo(), zzzClipCursor(), zzzSetCursorPos(), and zzzSetSystemCursor(). { PPROCESSINFO ppiCurrent = PpiCurrent(); /* * winlogon has rights to all windowstations. */ if (PsGetCurrentProcess()->UniqueProcessId == gpidLogon) return TRUE; if (!(ppiCurrent->W32PF_Flags & W32PF_IOWINSTA)) { RIPERR0(ERROR_REQUIRES_INTERACTIVE_WINDOWSTATION, RIP_WARNING, "Operation invalid on a non-interactive WindowStation."); return FALSE; } if (!RtlAreAllAccessesGranted(ppiCurrent->amwinsta, WINSTA_WRITEATTRIBUTES)) { RIPERR0(ERROR_ACCESS_DENIED, RIP_WARNING, "WINSTA_WRITEATTRIBUTES access to WindowStation denied."); return FALSE; } return TRUE; }

PSECURITY_DESCRIPTOR CreateSecurityDescriptor (  PACCESS_ALLOWED_ACE  paceList, DWORD  cbAce, BOOLEAN  fDaclDefaulted )

Definition at line 91 of file w32/ntuser/kernel/security.c. References FALSE, NT_SUCCESS, NTSTATUS(), NULL, PBYTE, RtlAddAce(), RtlCreateAcl(), RtlCreateSecurityDescriptor(), RtlSetDaclSecurityDescriptor(), RtlSetGroupSecurityDescriptor(), RtlSetOwnerSecurityDescriptor(), RtlSetSaclSecurityDescriptor(), Status, and TRUE. Referenced by InitSecurity(), xxxConnectService(), and xxxCreateWindowStation(). { PSECURITY_DESCRIPTOR psd; PACL pacl; NTSTATUS Status; /* * Allocate the security descriptor */ psd = (PSECURITY_DESCRIPTOR)UserAllocPoolWithQuota( cbAce + sizeof(ACL) + SECURITY_DESCRIPTOR_MIN_LENGTH, TAG_SECURITY); if (psd == NULL) return NULL; RtlCreateSecurityDescriptor(psd, SECURITY_DESCRIPTOR_REVISION); /* * Initialize the ACL */ pacl = (PACL)((PBYTE)psd + SECURITY_DESCRIPTOR_MIN_LENGTH); Status = RtlCreateAcl(pacl, sizeof(ACL) + cbAce, ACL_REVISION); if (NT_SUCCESS(Status)) { /* * Add the ACEs to the ACL. */ Status = RtlAddAce(pacl, ACL_REVISION, MAXULONG, paceList, cbAce); if (NT_SUCCESS(Status)) { /* * Initialize the SD */ Status = RtlSetDaclSecurityDescriptor(psd, (BOOLEAN)TRUE, pacl, fDaclDefaulted); RtlSetSaclSecurityDescriptor(psd, (BOOLEAN)FALSE, NULL, (BOOLEAN)FALSE); RtlSetOwnerSecurityDescriptor(psd, NULL, (BOOLEAN)FALSE); RtlSetGroupSecurityDescriptor(psd, NULL, (BOOLEAN)FALSE); } } if (!NT_SUCCESS(Status)) { UserFreePool(psd); return NULL; } return psd; }

BOOL InitSecurity (  VOID   )

Definition at line 152 of file w32/ntuser/kernel/security.c. References AllocAce(), BOOL, CreateSecurityDescriptor(), DWORD, FALSE, gpsdInitWinSta, NULL, _SE_EXPORTS::SeAliasAdminsSid, SeEnableAccessToExports, SeExports, _SE_EXPORTS::SeRestrictedSid, _SE_EXPORTS::SeWorldSid, and WinStaMapping. Referenced by Win32UserInitialize(). { PACCESS_ALLOWED_ACE paceList = NULL, pace; DWORD dwLength; /* * Get access to exported constants */ SeEnableAccessToExports(); /* * Create ACE list. */ paceList = AllocAce(NULL, ACCESS_ALLOWED_ACE_TYPE, CONTAINER_INHERIT_ACE | INHERIT_ONLY_ACE | NO_PROPAGATE_INHERIT_ACE, WinStaMapping.GenericAll, SeExports->SeWorldSid, &dwLength); if (paceList == NULL) return FALSE; pace = AllocAce(paceList, ACCESS_ALLOWED_ACE_TYPE, CONTAINER_INHERIT_ACE | INHERIT_ONLY_ACE | NO_PROPAGATE_INHERIT_ACE, WinStaMapping.GenericAll, SeExports->SeRestrictedSid, &dwLength); if (pace == NULL) { UserFreePool(paceList); return FALSE; } paceList = pace; pace = AllocAce(paceList, ACCESS_ALLOWED_ACE_TYPE, OBJECT_INHERIT_ACE | INHERIT_ONLY_ACE, GENERIC_ALL, SeExports->SeWorldSid, &dwLength); if (pace == NULL) { UserFreePool(paceList); return FALSE; } paceList = pace; pace = AllocAce(paceList, ACCESS_ALLOWED_ACE_TYPE, OBJECT_INHERIT_ACE | INHERIT_ONLY_ACE, GENERIC_ALL, SeExports->SeRestrictedSid, &dwLength); if (pace == NULL) { UserFreePool(paceList); return FALSE; } paceList = pace; pace = AllocAce(paceList, ACCESS_ALLOWED_ACE_TYPE, 0, DIRECTORY_QUERY | DIRECTORY_CREATE_OBJECT, SeExports->SeAliasAdminsSid, &dwLength); if (pace == NULL) { UserFreePool(paceList); return FALSE; } paceList = pace; pace = AllocAce(paceList, ACCESS_ALLOWED_ACE_TYPE, 0, DIRECTORY_TRAVERSE, SeExports->SeWorldSid, &dwLength); if (pace == NULL) { UserFreePool(paceList); return FALSE; } paceList = pace; pace = AllocAce(paceList, ACCESS_ALLOWED_ACE_TYPE, 0, DIRECTORY_TRAVERSE, SeExports->SeRestrictedSid, &dwLength); if (pace == NULL) { UserFreePool(paceList); return FALSE; } paceList = pace; /* * Create the SD */ gpsdInitWinSta = CreateSecurityDescriptor(paceList, dwLength, FALSE); UserFreePool(paceList); if (gpsdInitWinSta == NULL) { RIPMSG0(RIP_WARNING, "Initial windowstation security was not created!"); } return (BOOL)(gpsdInitWinSta != NULL); }

BOOL IsPrivileged (  PPRIVILEGE_SET  ppSet  )

Definition at line 593 of file w32/ntuser/kernel/security.c. { SECURITY_SUBJECT_CONTEXT Context; BOOLEAN bHeld; SeCaptureSubjectContext(&Context); SeLockSubjectContext(&Context); bHeld = SePrivilegeCheck(ppSet, &Context, UserMode); SePrivilegeObjectAuditAlarm(NULL, &Context, 0, ppSet, bHeld, UserMode); SeUnlockSubjectContext(&Context); SeReleaseSubjectContext(&Context); if (!bHeld) RIPERR0(ERROR_PRIVILEGE_NOT_HELD, RIP_VERBOSE, ""); /* * Return result of privilege check */ return (BOOL)bHeld; }

NTSTATUS TestForInteractiveUser (  PLUID  pluidCaller  )

Definition at line 255 of file w32/ntuser/kernel/security.c. References grpWinStaList, tagWINDOWSTATION::luidUser, NULL, and RtlEqualLuid(). Referenced by NtUserTestForInteractiveUser(). { PWINDOWSTATION pwinsta; UserAssert(grpWinStaList != NULL); /* * !!! * * This relies on the fact that there is only ONE interactive * windowstation and that it is the first one in the list. * If multiple windowstations are ever supported * a lookup will have to be done here. */ pwinsta = grpWinStaList; /* * Compare it with the id of the logged on user. */ if (RtlEqualLuid(pluidCaller, &pwinsta->luidUser)) return STATUS_SUCCESS; else return STATUS_ACCESS_DENIED; }

BOOL FASTCALL UserScreenAccessCheck (  VOID   )

Definition at line 863 of file w32/ntuser/kernel/security.c. References BOOL, FASTCALL, grpdeskRitInput, NULL, and PtiCurrentShared. { UserAssert(PtiCurrentShared() != NULL); return ( PtiCurrentShared() != NULL && PtiCurrentShared()->rpdesk == grpdeskRitInput && (W32GetCurrentProcess()->W32PF_Flags & (W32PF_READSCREENACCESSGRANTED | W32PF_IOWINSTA)) == (W32PF_READSCREENACCESSGRANTED | W32PF_IOWINSTA)); }

---

Variable Documentation

PSECURITY_DESCRIPTOR gpsdInitWinSta

Definition at line 22 of file w32/ntuser/kernel/security.c.

PRIVILEGE_SET psTcb

Initial value: { 1, PRIVILEGE_SET_ALL_NECESSARY, { SE_TCB_PRIVILEGE, 0 } } Definition at line 24 of file w32/ntuser/kernel/security.c. Referenced by _RegisterLogonProcess(), SrvRegisterServicesProcess(), and xxxWrapSendMessageBSM().

---