sec.c File Reference

#include <advapi32.h>

Include dependency graph for sec.c:

Go to the source code of this file.

Functions
	WINE_DEFAULT_DEBUG_CHANNEL (advapi)
BOOL WINAPI	GetSecurityDescriptorControl (PSECURITY_DESCRIPTOR pSecurityDescriptor, PSECURITY_DESCRIPTOR_CONTROL pControl, LPDWORD lpdwRevision)
BOOL WINAPI	GetSecurityDescriptorDacl (PSECURITY_DESCRIPTOR pSecurityDescriptor, LPBOOL lpbDaclPresent, PACL *pDacl, LPBOOL lpbDaclDefaulted)
BOOL WINAPI	GetSecurityDescriptorGroup (PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID *pGroup, LPBOOL lpbGroupDefaulted)
BOOL WINAPI	GetSecurityDescriptorOwner (PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID *pOwner, LPBOOL lpbOwnerDefaulted)
DWORD WINAPI	GetSecurityDescriptorRMControl (PSECURITY_DESCRIPTOR SecurityDescriptor, PUCHAR RMControl)
BOOL WINAPI	GetSecurityDescriptorSacl (PSECURITY_DESCRIPTOR pSecurityDescriptor, LPBOOL lpbSaclPresent, PACL *pSacl, LPBOOL lpbSaclDefaulted)
BOOL WINAPI	IsValidSecurityDescriptor (PSECURITY_DESCRIPTOR pSecurityDescriptor)
BOOL WINAPI	MakeAbsoluteSD2 (IN OUT PSECURITY_DESCRIPTOR pSelfRelativeSecurityDescriptor, OUT LPDWORD lpdwBufferSize)
BOOL WINAPI	MakeSelfRelativeSD (PSECURITY_DESCRIPTOR pAbsoluteSecurityDescriptor, PSECURITY_DESCRIPTOR pSelfRelativeSecurityDescriptor, LPDWORD lpdwBufferLength)
BOOL WINAPI	SetSecurityDescriptorControl (PSECURITY_DESCRIPTOR pSecurityDescriptor, SECURITY_DESCRIPTOR_CONTROL ControlBitsOfInterest, SECURITY_DESCRIPTOR_CONTROL ControlBitsToSet)
BOOL WINAPI	SetSecurityDescriptorDacl (PSECURITY_DESCRIPTOR pSecurityDescriptor, BOOL bDaclPresent, PACL pDacl, BOOL bDaclDefaulted)
BOOL WINAPI	SetSecurityDescriptorGroup (PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID pGroup, BOOL bGroupDefaulted)
BOOL WINAPI	SetSecurityDescriptorOwner (PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID pOwner, BOOL bOwnerDefaulted)
DWORD WINAPI	SetSecurityDescriptorRMControl (PSECURITY_DESCRIPTOR SecurityDescriptor, PUCHAR RMControl)
BOOL WINAPI	SetSecurityDescriptorSacl (PSECURITY_DESCRIPTOR pSecurityDescriptor, BOOL bSaclPresent, PACL pSacl, BOOL bSaclDefaulted)
VOID WINAPI	QuerySecurityAccessMask (IN SECURITY_INFORMATION SecurityInformation, OUT LPDWORD DesiredAccess)
VOID WINAPI	SetSecurityAccessMask (IN SECURITY_INFORMATION SecurityInformation, OUT LPDWORD DesiredAccess)
BOOL WINAPI	ConvertToAutoInheritPrivateObjectSecurity (IN PSECURITY_DESCRIPTOR ParentDescriptor, IN PSECURITY_DESCRIPTOR CurrentSecurityDescriptor, OUT PSECURITY_DESCRIPTOR *NewSecurityDescriptor, IN GUID *ObjectType, IN BOOLEAN IsDirectoryObject, IN PGENERIC_MAPPING GenericMapping)
DWORD WINAPI	BuildSecurityDescriptorW (IN PTRUSTEE_W pOwner OPTIONAL, IN PTRUSTEE_W pGroup OPTIONAL, IN ULONG cCountOfAccessEntries, IN PEXPLICIT_ACCESS_W pListOfAccessEntries OPTIONAL, IN ULONG cCountOfAuditEntries, IN PEXPLICIT_ACCESS_W pListOfAuditEntries OPTIONAL, IN PSECURITY_DESCRIPTOR pOldSD OPTIONAL, OUT PULONG pSizeNewSD, OUT PSECURITY_DESCRIPTOR *pNewSD)
DWORD WINAPI	BuildSecurityDescriptorA (IN PTRUSTEE_A pOwner OPTIONAL, IN PTRUSTEE_A pGroup OPTIONAL, IN ULONG cCountOfAccessEntries, IN PEXPLICIT_ACCESS_A pListOfAccessEntries OPTIONAL, IN ULONG cCountOfAuditEntries, IN PEXPLICIT_ACCESS_A pListOfAuditEntries OPTIONAL, IN PSECURITY_DESCRIPTOR pOldSD OPTIONAL, OUT PULONG pSizeNewSD, OUT PSECURITY_DESCRIPTOR *pNewSD)

Function Documentation

BuildSecurityDescriptorA()

DWORD WINAPI BuildSecurityDescriptorA	(	IN PTRUSTEE_A pOwner	OPTIONAL,
		IN PTRUSTEE_A pGroup	OPTIONAL,
		IN ULONG	cCountOfAccessEntries,
		IN PEXPLICIT_ACCESS_A pListOfAccessEntries	OPTIONAL,
		IN ULONG	cCountOfAuditEntries,
		IN PEXPLICIT_ACCESS_A pListOfAuditEntries	OPTIONAL,
		IN PSECURITY_DESCRIPTOR pOldSD	OPTIONAL,
		OUT PULONG	pSizeNewSD,
		OUT PSECURITY_DESCRIPTOR *	pNewSD
	)

Definition at line 456 of file sec.c.

{
    UNIMPLEMENTED;
    return FALSE;
}

BuildSecurityDescriptorW()

DWORD WINAPI BuildSecurityDescriptorW	(	IN PTRUSTEE_W pOwner	OPTIONAL,
		IN PTRUSTEE_W pGroup	OPTIONAL,
		IN ULONG	cCountOfAccessEntries,
		IN PEXPLICIT_ACCESS_W pListOfAccessEntries	OPTIONAL,
		IN ULONG	cCountOfAuditEntries,
		IN PEXPLICIT_ACCESS_W pListOfAuditEntries	OPTIONAL,
		IN PSECURITY_DESCRIPTOR pOldSD	OPTIONAL,
		OUT PULONG	pSizeNewSD,
		OUT PSECURITY_DESCRIPTOR *	pNewSD
	)

Definition at line 436 of file sec.c.

{
    UNIMPLEMENTED;
    return FALSE;
}

Referenced by test_BuildSecurityDescriptorW().

ConvertToAutoInheritPrivateObjectSecurity()

BOOL WINAPI ConvertToAutoInheritPrivateObjectSecurity	(	IN PSECURITY_DESCRIPTOR	ParentDescriptor,
		IN PSECURITY_DESCRIPTOR	CurrentSecurityDescriptor,
		OUT PSECURITY_DESCRIPTOR *	NewSecurityDescriptor,
		IN GUID *	ObjectType,
		IN BOOLEAN	IsDirectoryObject,
		IN PGENERIC_MAPPING	GenericMapping
	)

Definition at line 419 of file sec.c.

{
    UNIMPLEMENTED;
    return FALSE;
}

GetSecurityDescriptorControl()

BOOL WINAPI GetSecurityDescriptorControl	(	PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		PSECURITY_DESCRIPTOR_CONTROL	pControl,
		LPDWORD	lpdwRevision
	)

Definition at line 21 of file sec.c.

{
    NTSTATUS Status;
 
    Status = RtlGetControlSecurityDescriptor(pSecurityDescriptor,
                                             pControl,
                                             (PULONG)lpdwRevision);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by DumpDacl(), DumpSacl(), test_GetNamedSecurityInfoA(), test_GetShellSecurityDescriptor(), test_PrivateObjectSecurity(), test_SetSecurityDescriptorControl(), and test_token_label().

GetSecurityDescriptorDacl()

BOOL WINAPI GetSecurityDescriptorDacl	(	PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		LPBOOL	lpbDaclPresent,
		PACL *	pDacl,
		LPBOOL	lpbDaclDefaulted
	)

Definition at line 45 of file sec.c.

{
    BOOLEAN DaclPresent;
    BOOLEAN DaclDefaulted;
    NTSTATUS Status;
 
    Status = RtlGetDaclSecurityDescriptor(pSecurityDescriptor,
                                          &DaclPresent,
                                          pDacl,
                                          &DaclDefaulted);
    *lpbDaclPresent = (BOOL)DaclPresent;
    *lpbDaclDefaulted = (BOOL)DaclDefaulted;
 
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by AccRewriteGetHandleRights(), CSecurityDescriptor::BeginDACLInteration(), DumpDacl(), get_sd(), handle_setacl(), IEffectivePermission_fnGetEffectivePermission(), PrintFileDacl(), ReloadPrincipalsList(), RSAENH_CPSetProvParam(), SetupCommitFileQueueW(), test_child_token_sd(), test_default_dacl_owner_sid(), test_GetNamedSecurityInfoA(), test_GetSecurityInfo(), test_GetShellSecurityDescriptor(), test_security_descriptor(), test_token_label(), test_token_security_descriptor(), and validate_default_security_descriptor().

GetSecurityDescriptorGroup()

BOOL WINAPI GetSecurityDescriptorGroup	(	PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		PSID *	pGroup,
		LPBOOL	lpbGroupDefaulted
	)

Definition at line 76 of file sec.c.

{
    BOOLEAN GroupDefaulted;
    NTSTATUS Status;
 
    Status = RtlGetGroupSecurityDescriptor(pSecurityDescriptor,
                                           pGroup,
                                           &GroupDefaulted);
    *lpbGroupDefaulted = (BOOL)GroupDefaulted;
 
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by AccRewriteGetHandleRights(), DumpGroup(), get_sd(), handle_setacl(), RSAENH_CPSetProvParam(), SetupCommitFileQueueW(), test_GetNamedSecurityInfoA(), test_GetSecurityInfo(), test_group_equal(), test_security_descriptor(), test_token_label(), and validate_default_security_descriptor().

GetSecurityDescriptorOwner()

BOOL WINAPI GetSecurityDescriptorOwner	(	PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		PSID *	pOwner,
		LPBOOL	lpbOwnerDefaulted
	)

Definition at line 103 of file sec.c.

{
    BOOLEAN OwnerDefaulted;
    NTSTATUS Status;
 
    Status = RtlGetOwnerSecurityDescriptor(pSecurityDescriptor,
                                           pOwner,
                                           &OwnerDefaulted);
    *lpbOwnerDefaulted = (BOOL)OwnerDefaulted;
 
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by AccRewriteGetHandleRights(), DumpOwner(), CShellCommandOwner::Execute(), get_sd(), handle_setacl(), ReloadPrincipalsList(), RSAENH_CPSetProvParam(), SetupCommitFileQueueW(), test_default_dacl_owner_sid(), test_GetNamedSecurityInfoA(), test_GetSecurityInfo(), test_owner_equal(), test_security_descriptor(), test_token_label(), and validate_default_security_descriptor().

GetSecurityDescriptorRMControl()

DWORD WINAPI GetSecurityDescriptorRMControl	(	PSECURITY_DESCRIPTOR	SecurityDescriptor,
		PUCHAR	RMControl
	)

Definition at line 130 of file sec.c.

{
    if (!RtlGetSecurityDescriptorRMControl(SecurityDescriptor,
                                           RMControl))
        return ERROR_INVALID_DATA;
 
    return ERROR_SUCCESS;
}

GetSecurityDescriptorSacl()

BOOL WINAPI GetSecurityDescriptorSacl	(	PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		LPBOOL	lpbSaclPresent,
		PACL *	pSacl,
		LPBOOL	lpbSaclDefaulted
	)

Definition at line 146 of file sec.c.

{
    BOOLEAN SaclPresent;
    BOOLEAN SaclDefaulted;
    NTSTATUS Status;
 
    Status = RtlGetSaclSecurityDescriptor(pSecurityDescriptor,
                                          &SaclPresent,
                                          pSacl,
                                          &SaclDefaulted);
    *lpbSaclPresent = (BOOL)SaclPresent;
    *lpbSaclDefaulted = (BOOL)SaclDefaulted;
 
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by AccRewriteGetHandleRights(), CSecurityDescriptor::BeginSACLInteration(), DumpSacl(), get_sd(), RSAENH_CPSetProvParam(), SetupCommitFileQueueW(), test_AddMandatoryAce(), test_child_token_sd(), test_child_token_sd_medium(), test_child_token_sd_restricted(), test_security_descriptor(), test_token_label(), and test_token_security_descriptor().

IsValidSecurityDescriptor()

BOOL WINAPI IsValidSecurityDescriptor

(

PSECURITY_DESCRIPTOR

pSecurityDescriptor

)

Definition at line 176 of file sec.c.

{
    BOOLEAN Result;
 
    Result = RtlValidSecurityDescriptor (pSecurityDescriptor);
    if (Result == FALSE)
        SetLastError(RtlNtStatusToDosError(STATUS_INVALID_SECURITY_DESCR));
 
    return (BOOL)Result;
}

Referenced by get_sd(), test_GetShellSecurityDescriptor(), and validate_default_security_descriptor().

MakeAbsoluteSD2()

BOOL WINAPI MakeAbsoluteSD2	(	IN OUT PSECURITY_DESCRIPTOR	pSelfRelativeSecurityDescriptor,
		OUT LPDWORD	lpdwBufferSize
	)

Definition at line 192 of file sec.c.

{
    NTSTATUS Status;
 
    Status = RtlSelfRelativeToAbsoluteSD2(pSelfRelativeSecurityDescriptor,
                                          lpdwBufferSize);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

MakeSelfRelativeSD()

BOOL WINAPI MakeSelfRelativeSD	(	PSECURITY_DESCRIPTOR	pAbsoluteSecurityDescriptor,
		PSECURITY_DESCRIPTOR	pSelfRelativeSecurityDescriptor,
		LPDWORD	lpdwBufferLength
	)

Definition at line 214 of file sec.c.

{
    NTSTATUS Status;
 
    Status = RtlAbsoluteToSelfRelativeSD(pAbsoluteSecurityDescriptor,
                                         pSelfRelativeSecurityDescriptor,
                                         (PULONG)lpdwBufferLength);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by ConvertToSelfRelative(), CreateDefaultProcessSecurityCommon(), CreateDhcpPipeSecurity(), CreatePnpInstallEventSecurity(), CreatePowrProfSemaphoreSecurity(), get_sd(), handle_getacl(), test_BuildSecurityDescriptorW(), and test_security_descriptor().

QuerySecurityAccessMask()

VOID WINAPI QuerySecurityAccessMask	(	IN SECURITY_INFORMATION	SecurityInformation,
		OUT LPDWORD	DesiredAccess
	)

Definition at line 377 of file sec.c.

{
    *DesiredAccess = 0;
 
    if (SecurityInformation & (OWNER_SECURITY_INFORMATION |
                               GROUP_SECURITY_INFORMATION | DACL_SECURITY_INFORMATION))
    {
        *DesiredAccess |= READ_CONTROL;
    }
 
    if (SecurityInformation & SACL_SECURITY_INFORMATION)
        *DesiredAccess |= ACCESS_SYSTEM_SECURITY;
}

Referenced by GetFileSecurityW().

SetSecurityAccessMask()

VOID WINAPI SetSecurityAccessMask	(	IN SECURITY_INFORMATION	SecurityInformation,
		OUT LPDWORD	DesiredAccess
	)

Definition at line 398 of file sec.c.

{
    *DesiredAccess = 0;
 
    if (SecurityInformation & (OWNER_SECURITY_INFORMATION | GROUP_SECURITY_INFORMATION))
        *DesiredAccess |= WRITE_OWNER;
 
    if (SecurityInformation & DACL_SECURITY_INFORMATION)
        *DesiredAccess |= WRITE_DAC;
 
    if (SecurityInformation & SACL_SECURITY_INFORMATION)
        *DesiredAccess |= ACCESS_SYSTEM_SECURITY;
}

Referenced by SetFileSecurityW().

SetSecurityDescriptorControl()

BOOL WINAPI SetSecurityDescriptorControl	(	PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		SECURITY_DESCRIPTOR_CONTROL	ControlBitsOfInterest,
		SECURITY_DESCRIPTOR_CONTROL	ControlBitsToSet
	)

Definition at line 238 of file sec.c.

{
    NTSTATUS Status;
 
    Status = RtlSetControlSecurityDescriptor(pSecurityDescriptor,
                                             ControlBitsOfInterest,
                                             ControlBitsToSet);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by pSetSecurityInfoCheck().

SetSecurityDescriptorDacl()

BOOL WINAPI SetSecurityDescriptorDacl	(	PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		BOOL	bDaclPresent,
		PACL	pDacl,
		BOOL	bDaclDefaulted
	)

Definition at line 262 of file sec.c.

{
    NTSTATUS Status;
 
    Status = RtlSetDaclSecurityDescriptor(pSecurityDescriptor,
                                          bDaclPresent,
                                          pDacl,
                                          bDaclDefaulted);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by AllowDesktopAccessToUser(), AllowWinstaAccessToUser(), CreateAllAccessSecurityAttributes(), CreateApplicationDesktopSecurity(), CreateDefaultProcessSecurityCommon(), CreateDefaultSecurityDescriptor(), CreateDhcpPipeSecurity(), CreateLogoffSecurityAttributes(), CreatePnpInstallEventSecurity(), CreatePowrProfSemaphoreSecurity(), CreateProfileMutex(), CreatePublicEvent(), CreateScreenSaverSecurity(), CreateWinlogonDesktopSecurity(), CreateWinstaSecurity(), DwInitializeSdFromThreadToken(), get_sd(), GetShellSecurityDescriptor(), handle_getacl(), InitializeAudioDeviceListLock(), pSetSecurityInfoCheck(), START_TEST(), test_AccessCheck(), test_ConvertSecurityDescriptorToString(), test_CreateDirectoryA(), test_event(), test_GetNamedSecurityInfoA(), test_GetSecurityInfo(), test_maximum_allowed(), test_process_security(), test_reg_create_key(), test_reg_open_key(), and test_token_security_descriptor().

SetSecurityDescriptorGroup()

BOOL WINAPI SetSecurityDescriptorGroup	(	PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		PSID	pGroup,
		BOOL	bGroupDefaulted
	)

Definition at line 288 of file sec.c.

{
    NTSTATUS Status;
 
    Status = RtlSetGroupSecurityDescriptor(pSecurityDescriptor,
                                           pGroup,
                                           bGroupDefaulted);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by CreateDefaultProcessSecurityCommon(), CreateDhcpPipeSecurity(), CreatePnpInstallEventSecurity(), CreatePowrProfSemaphoreSecurity(), DwInitializeSdFromThreadToken(), get_sd(), handle_getacl(), pSetSecurityInfoCheck(), test_AccessCheck(), test_ConvertSecurityDescriptorToString(), test_process_security(), and test_security_info().

SetSecurityDescriptorOwner()

BOOL WINAPI SetSecurityDescriptorOwner	(	PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		PSID	pOwner,
		BOOL	bOwnerDefaulted
	)

Definition at line 312 of file sec.c.

{
    NTSTATUS Status;
 
    Status = RtlSetOwnerSecurityDescriptor(pSecurityDescriptor,
                                           pOwner,
                                           bOwnerDefaulted);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by CreateDefaultProcessSecurityCommon(), CreateDhcpPipeSecurity(), CreatePnpInstallEventSecurity(), CreatePowrProfSemaphoreSecurity(), DwInitializeSdFromThreadToken(), get_sd(), handle_getacl(), pSetSecurityInfoCheck(), TakeOwnershipOfFile(), test_AccessCheck(), test_ConvertSecurityDescriptorToString(), test_process_security(), and test_security_info().

SetSecurityDescriptorRMControl()

DWORD WINAPI SetSecurityDescriptorRMControl	(	PSECURITY_DESCRIPTOR	SecurityDescriptor,
		PUCHAR	RMControl
	)

Definition at line 336 of file sec.c.

{
    RtlSetSecurityDescriptorRMControl(SecurityDescriptor,
                                      RMControl);
 
    return ERROR_SUCCESS;
}

SetSecurityDescriptorSacl()

BOOL WINAPI SetSecurityDescriptorSacl	(	PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		BOOL	bSaclPresent,
		PACL	pSacl,
		BOOL	bSaclDefaulted
	)

Definition at line 351 of file sec.c.

{
    NTSTATUS Status;
 
    Status = RtlSetSaclSecurityDescriptor(pSecurityDescriptor,
                                          bSaclPresent,
                                          pSacl,
                                          bSaclDefaulted);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by get_sd(), pSetSecurityInfoCheck(), test_AddMandatoryAce(), test_ConvertSecurityDescriptorToString(), and test_token_security_descriptor().

WINE_DEFAULT_DEBUG_CHANNEL()

WINE_DEFAULT_DEBUG_CHANNEL

(

advapi

)