#include <advapi32.h>
#include <sddl.h>

Include dependency graph for security.c:

Classes
struct	_ACEFLAG

union	_MAX_SID

struct	WELLKNOWNSID

struct	WELLKNOWNRID

Macros
#define	ADS_RIGHT_DS_CREATE_CHILD 0x0001

#define	ADS_RIGHT_DS_DELETE_CHILD 0x0002

#define	ADS_RIGHT_ACTRL_DS_LIST 0x0004

#define	ADS_RIGHT_DS_SELF 0x0008

#define	ADS_RIGHT_DS_READ_PROP 0x0010

#define	ADS_RIGHT_DS_WRITE_PROP 0x0020

#define	ADS_RIGHT_DS_DELETE_TREE 0x0040

#define	ADS_RIGHT_DS_LIST_OBJECT 0x0080

#define	ADS_RIGHT_DS_CONTROL_ACCESS 0x0100

Typedefs
typedef struct _ACEFLAG	ACEFLAG

typedef struct _ACEFLAG *	LPACEFLAG

typedef struct _MAX_SID	MAX_SID

typedef struct WELLKNOWNSID	WELLKNOWNSID

typedef struct WELLKNOWNRID	WELLKNOWNRID

Functions
	WINE_DEFAULT_DEBUG_CHANNEL (advapi)

static BOOL	ParseStringSidToSid (LPCWSTR StringSid, PSID pSid, LPDWORD cBytes)

static const char *	debugstr_sid (PSID sid)

static __inline BOOL	set_ntstatus (NTSTATUS status)

static LPWSTR	SERV_dup (LPCSTR str)

BOOL	ADVAPI_IsLocalComputer (LPCWSTR ServerName)

BOOL	ADVAPI_GetComputerSid (PSID sid)

BOOL WINAPI	OpenProcessToken (HANDLE ProcessHandle, DWORD DesiredAccess, PHANDLE TokenHandle)

BOOL WINAPI	OpenThreadToken (HANDLE ThreadHandle, DWORD DesiredAccess, BOOL OpenAsSelf, HANDLE *TokenHandle)

BOOL WINAPI	AdjustTokenGroups (HANDLE TokenHandle, BOOL ResetToDefault, PTOKEN_GROUPS NewState, DWORD BufferLength, PTOKEN_GROUPS PreviousState, PDWORD ReturnLength)

BOOL WINAPI	AdjustTokenPrivileges (HANDLE TokenHandle, BOOL DisableAllPrivileges, PTOKEN_PRIVILEGES NewState, DWORD BufferLength, PTOKEN_PRIVILEGES PreviousState, PDWORD ReturnLength)

BOOL WINAPI	GetTokenInformation (HANDLE TokenHandle, TOKEN_INFORMATION_CLASS TokenInformationClass, LPVOID TokenInformation, DWORD TokenInformationLength, PDWORD ReturnLength)

BOOL WINAPI	SetTokenInformation (HANDLE TokenHandle, TOKEN_INFORMATION_CLASS TokenInformationClass, LPVOID TokenInformation, DWORD TokenInformationLength)

BOOL WINAPI	SetThreadToken (IN PHANDLE ThreadHandle OPTIONAL, IN HANDLE TokenHandle)

BOOL WINAPI	CreateRestrictedToken (HANDLE baseToken, DWORD flags, DWORD nDisableSids, PSID_AND_ATTRIBUTES disableSids, DWORD nDeletePrivs, PLUID_AND_ATTRIBUTES deletePrivs, DWORD nRestrictSids, PSID_AND_ATTRIBUTES restrictSids, PHANDLE newToken)

BOOL WINAPI	AllocateAndInitializeSid (PSID_IDENTIFIER_AUTHORITY pIdentifierAuthority, BYTE nSubAuthorityCount, DWORD nSubAuthority0, DWORD nSubAuthority1, DWORD nSubAuthority2, DWORD nSubAuthority3, DWORD nSubAuthority4, DWORD nSubAuthority5, DWORD nSubAuthority6, DWORD nSubAuthority7, PSID *pSid)

PVOID WINAPI	FreeSid (PSID pSid)

BOOL WINAPI	CopySid (DWORD nDestinationSidLength, PSID pDestinationSid, PSID pSourceSid)

BOOL WINAPI	CreateWellKnownSid (IN WELL_KNOWN_SID_TYPE WellKnownSidType, IN PSID DomainSid OPTIONAL, OUT PSID pSid, IN OUT DWORD *cbSid)

BOOL WINAPI	IsWellKnownSid (IN PSID pSid, IN WELL_KNOWN_SID_TYPE WellKnownSidType)

BOOL WINAPI	IsValidSid (PSID pSid)

BOOL WINAPI	EqualSid (PSID pSid1, PSID pSid2)

BOOL WINAPI	EqualPrefixSid (PSID pSid1, PSID pSid2)

DWORD WINAPI	GetSidLengthRequired (UCHAR nSubAuthorityCount)

BOOL WINAPI	InitializeSid (PSID Sid, PSID_IDENTIFIER_AUTHORITY pIdentifierAuthority, BYTE nSubAuthorityCount)

PSID_IDENTIFIER_AUTHORITY WINAPI	GetSidIdentifierAuthority (PSID pSid)

PDWORD WINAPI	GetSidSubAuthority (PSID pSid, DWORD nSubAuthority)

PUCHAR WINAPI	GetSidSubAuthorityCount (PSID pSid)

DWORD WINAPI	GetLengthSid (PSID pSid)

BOOL WINAPI	InitializeSecurityDescriptor (PSECURITY_DESCRIPTOR pSecurityDescriptor, DWORD dwRevision)

BOOL WINAPI	MakeAbsoluteSD (PSECURITY_DESCRIPTOR pSelfRelativeSecurityDescriptor, PSECURITY_DESCRIPTOR pAbsoluteSecurityDescriptor, LPDWORD lpdwAbsoluteSecurityDescriptorSize, PACL pDacl, LPDWORD lpdwDaclSize, PACL pSacl, LPDWORD lpdwSaclSize, PSID pOwner, LPDWORD lpdwOwnerSize, PSID pPrimaryGroup, LPDWORD lpdwPrimaryGroupSize)

BOOL WINAPI	GetKernelObjectSecurity (HANDLE Handle, SECURITY_INFORMATION RequestedInformation, PSECURITY_DESCRIPTOR pSecurityDescriptor, DWORD nLength, LPDWORD lpnLengthNeeded)

BOOL WINAPI	InitializeAcl (PACL pAcl, DWORD nAclLength, DWORD dwAclRevision)

BOOL WINAPI	ImpersonateNamedPipeClient (HANDLE hNamedPipe)

BOOL WINAPI	AddAccessAllowedAce (PACL pAcl, DWORD dwAceRevision, DWORD AccessMask, PSID pSid)

BOOL WINAPI	AddAccessAllowedAceEx (PACL pAcl, DWORD dwAceRevision, DWORD AceFlags, DWORD AccessMask, PSID pSid)

BOOL WINAPI	AddAccessDeniedAce (PACL pAcl, DWORD dwAceRevision, DWORD AccessMask, PSID pSid)

BOOL WINAPI	AddAccessDeniedAceEx (PACL pAcl, DWORD dwAceRevision, DWORD AceFlags, DWORD AccessMask, PSID pSid)

BOOL WINAPI	AddAce (PACL pAcl, DWORD dwAceRevision, DWORD dwStartingAceIndex, LPVOID pAceList, DWORD nAceListLength)

BOOL WINAPI	DeleteAce (PACL pAcl, DWORD dwAceIndex)

BOOL WINAPI	FindFirstFreeAce (PACL pAcl, LPVOID *pAce)

BOOL WINAPI	GetAce (PACL pAcl, DWORD dwAceIndex, LPVOID *pAce)

BOOL WINAPI	GetAclInformation (PACL pAcl, LPVOID pAclInformation, DWORD nAclInformationLength, ACL_INFORMATION_CLASS dwAclInformationClass)

BOOL WINAPI	IsValidAcl (PACL pAcl)

BOOL WINAPI	AllocateLocallyUniqueId (PLUID Luid)

BOOL WINAPI	LookupPrivilegeDisplayNameA (LPCSTR lpSystemName, LPCSTR lpName, LPSTR lpDisplayName, LPDWORD cchDisplayName, LPDWORD lpLanguageId)

BOOL WINAPI	LookupPrivilegeNameA (LPCSTR lpSystemName, PLUID lpLuid, LPSTR lpName, LPDWORD cchName)

BOOL WINAPI	GetFileSecurityA (LPCSTR lpFileName, SECURITY_INFORMATION RequestedInformation, PSECURITY_DESCRIPTOR pSecurityDescriptor, DWORD nLength, LPDWORD lpnLengthNeeded)

BOOL WINAPI	GetFileSecurityW (LPCWSTR lpFileName, SECURITY_INFORMATION RequestedInformation, PSECURITY_DESCRIPTOR pSecurityDescriptor, DWORD nLength, LPDWORD lpnLengthNeeded)

BOOL WINAPI	SetFileSecurityA (LPCSTR lpFileName, SECURITY_INFORMATION SecurityInformation, PSECURITY_DESCRIPTOR pSecurityDescriptor)

BOOL WINAPI	SetFileSecurityW (LPCWSTR lpFileName, SECURITY_INFORMATION SecurityInformation, PSECURITY_DESCRIPTOR pSecurityDescriptor)

BOOL WINAPI	QueryWindows31FilesMigration (DWORD x1)

BOOL WINAPI	SynchronizeWindows31FilesAndWindowsNTRegistry (DWORD x1, DWORD x2, DWORD x3, DWORD x4)

BOOL WINAPI	RevertToSelf (VOID)

BOOL WINAPI	ImpersonateSelf (SECURITY_IMPERSONATION_LEVEL ImpersonationLevel)

BOOL WINAPI	AccessCheck (IN PSECURITY_DESCRIPTOR pSecurityDescriptor, IN HANDLE ClientToken, IN DWORD DesiredAccess, IN PGENERIC_MAPPING GenericMapping, OUT PPRIVILEGE_SET PrivilegeSet OPTIONAL, IN OUT LPDWORD PrivilegeSetLength, OUT LPDWORD GrantedAccess, OUT LPBOOL AccessStatus)

BOOL WINAPI	AccessCheckByType (PSECURITY_DESCRIPTOR pSecurityDescriptor, PSID PrincipalSelfSid, HANDLE ClientToken, DWORD DesiredAccess, POBJECT_TYPE_LIST ObjectTypeList, DWORD ObjectTypeListLength, PGENERIC_MAPPING GenericMapping, PPRIVILEGE_SET PrivilegeSet, LPDWORD PrivilegeSetLength, LPDWORD GrantedAccess, LPBOOL AccessStatus)

BOOL WINAPI	SetKernelObjectSecurity (HANDLE Handle, SECURITY_INFORMATION SecurityInformation, PSECURITY_DESCRIPTOR SecurityDescriptor)

BOOL WINAPI	AddAuditAccessAce (PACL pAcl, DWORD dwAceRevision, DWORD dwAccessMask, PSID pSid, BOOL bAuditSuccess, BOOL bAuditFailure)

BOOL WINAPI	AddAuditAccessAceEx (PACL pAcl, DWORD dwAceRevision, DWORD AceFlags, DWORD dwAccessMask, PSID pSid, BOOL bAuditSuccess, BOOL bAuditFailure)

BOOL WINAPI	LookupAccountNameA (LPCSTR SystemName, LPCSTR AccountName, PSID Sid, LPDWORD SidLength, LPSTR ReferencedDomainName, LPDWORD hReferencedDomainNameLength, PSID_NAME_USE SidNameUse)

BOOL WINAPI	PrivilegeCheck (HANDLE ClientToken, PPRIVILEGE_SET RequiredPrivileges, LPBOOL pfResult)

DWORD WINAPI	GetSecurityInfoExA (HANDLE hObject, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, LPCSTR lpProvider, LPCSTR lpProperty, PACTRL_ACCESSA ppAccessList, PACTRL_AUDITA ppAuditList, LPSTR lppOwner, LPSTR lppGroup)

DWORD WINAPI	GetSecurityInfoExW (HANDLE hObject, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, LPCWSTR lpProvider, LPCWSTR lpProperty, PACTRL_ACCESSW ppAccessList, PACTRL_AUDITW ppAuditList, LPWSTR lppOwner, LPWSTR lppGroup)

VOID WINAPI	BuildExplicitAccessWithNameA (PEXPLICIT_ACCESSA pExplicitAccess, LPSTR pTrusteeName, DWORD AccessPermissions, ACCESS_MODE AccessMode, DWORD Inheritance)

VOID WINAPI	BuildExplicitAccessWithNameW (PEXPLICIT_ACCESSW pExplicitAccess, LPWSTR pTrusteeName, DWORD AccessPermissions, ACCESS_MODE AccessMode, DWORD Inheritance)

VOID WINAPI	BuildTrusteeWithObjectsAndNameA (PTRUSTEEA pTrustee, POBJECTS_AND_NAME_A pObjName, SE_OBJECT_TYPE ObjectType, LPSTR ObjectTypeName, LPSTR InheritedObjectTypeName, LPSTR Name)

VOID WINAPI	BuildTrusteeWithObjectsAndNameW (PTRUSTEEW pTrustee, POBJECTS_AND_NAME_W pObjName, SE_OBJECT_TYPE ObjectType, LPWSTR ObjectTypeName, LPWSTR InheritedObjectTypeName, LPWSTR Name)

VOID WINAPI	BuildTrusteeWithObjectsAndSidA (PTRUSTEEA pTrustee, POBJECTS_AND_SID pObjSid, GUID pObjectGuid, GUID pInheritedObjectGuid, PSID pSid)

VOID WINAPI	BuildTrusteeWithObjectsAndSidW (PTRUSTEEW pTrustee, POBJECTS_AND_SID pObjSid, GUID pObjectGuid, GUID pInheritedObjectGuid, PSID pSid)

VOID WINAPI	BuildTrusteeWithSidA (PTRUSTEE_A pTrustee, PSID pSid)

VOID WINAPI	BuildTrusteeWithSidW (PTRUSTEE_W pTrustee, PSID pSid)

VOID WINAPI	BuildTrusteeWithNameA (PTRUSTEE_A pTrustee, LPSTR name)

VOID WINAPI	BuildTrusteeWithNameW (PTRUSTEE_W pTrustee, LPWSTR name)

TRUSTEE_FORM WINAPI	GetTrusteeFormA (PTRUSTEEA pTrustee)

TRUSTEE_FORM WINAPI	GetTrusteeFormW (PTRUSTEEW pTrustee)

LPSTR WINAPI	GetTrusteeNameA (PTRUSTEE_A pTrustee)

LPWSTR WINAPI	GetTrusteeNameW (PTRUSTEE_W pTrustee)

TRUSTEE_TYPE WINAPI	GetTrusteeTypeA (PTRUSTEE_A pTrustee)

TRUSTEE_TYPE WINAPI	GetTrusteeTypeW (PTRUSTEE_W pTrustee)

BOOL WINAPI	SetAclInformation (PACL pAcl, LPVOID pAclInformation, DWORD nAclInformationLength, ACL_INFORMATION_CLASS dwAclInformationClass)

DWORD WINAPI	SetNamedSecurityInfoA (LPSTR pObjectName, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, PSID psidOwner, PSID psidGroup, PACL pDacl, PACL pSacl)

BOOL WINAPI	AreAllAccessesGranted (DWORD GrantedAccess, DWORD DesiredAccess)

BOOL WINAPI	AreAnyAccessesGranted (DWORD GrantedAccess, DWORD DesiredAccess)

static DWORD	ParseAclStringFlags (LPCWSTR *StringAcl)

static BYTE	ParseAceStringType (LPCWSTR *StringAcl)

static BYTE	ParseAceStringFlags (LPCWSTR *StringAcl)

static DWORD	ParseAceStringRights (LPCWSTR *StringAcl)

static BOOL	ParseStringAclToAcl (LPCWSTR StringAcl, LPDWORD lpdwFlags, PACL pAcl, LPDWORD cBytes)

static BOOL	ParseStringSecurityDescriptorToSecurityDescriptor (LPCWSTR StringSecurityDescriptor, SECURITY_DESCRIPTOR_RELATIVE *SecurityDescriptor, LPDWORD cBytes)

BOOL WINAPI	ConvertStringSecurityDescriptorToSecurityDescriptorA (LPCSTR StringSecurityDescriptor, DWORD StringSDRevision, PSECURITY_DESCRIPTOR *SecurityDescriptor, PULONG SecurityDescriptorSize)

BOOL WINAPI	ConvertStringSecurityDescriptorToSecurityDescriptorW (LPCWSTR StringSecurityDescriptor, DWORD StringSDRevision, PSECURITY_DESCRIPTOR *SecurityDescriptor, PULONG SecurityDescriptorSize)

static void	DumpString (LPCWSTR string, int cch, WCHAR *pwptr, ULONG plen)

static BOOL	DumpSidNumeric (PSID psid, WCHAR *pwptr, ULONG plen)

static BOOL	DumpSid (PSID psid, WCHAR *pwptr, ULONG plen)

static void	DumpRights (DWORD mask, WCHAR *pwptr, ULONG plen)

static BOOL	DumpAce (LPVOID pace, WCHAR *pwptr, ULONG plen)

static BOOL	DumpAcl (PACL pacl, WCHAR *pwptr, ULONG plen, BOOL protected, BOOL autoInheritReq, BOOL autoInherited)

static BOOL	DumpOwner (PSECURITY_DESCRIPTOR SecurityDescriptor, WCHAR *pwptr, ULONG plen)

static BOOL	DumpGroup (PSECURITY_DESCRIPTOR SecurityDescriptor, WCHAR *pwptr, ULONG plen)

static BOOL	DumpDacl (PSECURITY_DESCRIPTOR SecurityDescriptor, WCHAR *pwptr, ULONG plen)

static BOOL	DumpSacl (PSECURITY_DESCRIPTOR SecurityDescriptor, WCHAR *pwptr, ULONG plen)

BOOL WINAPI	ConvertSecurityDescriptorToStringSecurityDescriptorW (PSECURITY_DESCRIPTOR SecurityDescriptor, DWORD SDRevision, SECURITY_INFORMATION RequestedInformation, LPWSTR *OutputString, PULONG OutputLen)

BOOL WINAPI	ConvertSecurityDescriptorToStringSecurityDescriptorA (PSECURITY_DESCRIPTOR SecurityDescriptor, DWORD SDRevision, SECURITY_INFORMATION Information, LPSTR *OutputString, PULONG OutputLen)

BOOL WINAPI	ConvertStringSidToSidW (LPCWSTR StringSid, PSID *Sid)

BOOL WINAPI	ConvertStringSidToSidA (LPCSTR StringSid, PSID *Sid)

BOOL WINAPI	ConvertSidToStringSidW (PSID Sid, LPWSTR *StringSid)

BOOL WINAPI	ConvertSidToStringSidA (PSID Sid, LPSTR *StringSid)

BOOL WINAPI	CreateProcessWithLogonW (LPCWSTR lpUsername, LPCWSTR lpDomain, LPCWSTR lpPassword, DWORD dwLogonFlags, LPCWSTR lpApplicationName, LPWSTR lpCommandLine, DWORD dwCreationFlags, LPVOID lpEnvironment, LPCWSTR lpCurrentDirectory, LPSTARTUPINFOW lpStartupInfo, LPPROCESS_INFORMATION lpProcessInformation)

BOOL WINAPI	CreateProcessWithTokenW (HANDLE token, DWORD logon_flags, LPCWSTR application_name, LPWSTR command_line, DWORD creation_flags, void environment, LPCWSTR current_directory, STARTUPINFOW startup_info, PROCESS_INFORMATION *process_information)

BOOL WINAPI	DuplicateTokenEx (IN HANDLE ExistingTokenHandle, IN DWORD dwDesiredAccess, IN LPSECURITY_ATTRIBUTES lpTokenAttributes OPTIONAL, IN SECURITY_IMPERSONATION_LEVEL ImpersonationLevel, IN TOKEN_TYPE TokenType, OUT PHANDLE DuplicateTokenHandle)

BOOL WINAPI	DuplicateToken (IN HANDLE ExistingTokenHandle, IN SECURITY_IMPERSONATION_LEVEL ImpersonationLevel, OUT PHANDLE DuplicateTokenHandle)

static DWORD	ComputeStringSidSize (LPCWSTR StringSid)

DWORD WINAPI	GetNamedSecurityInfoA (LPSTR pObjectName, SE_OBJECT_TYPE ObjectType, SECURITY_INFORMATION SecurityInfo, PSID ppsidOwner, PSID ppsidGroup, PACL ppDacl, PACL ppSacl, PSECURITY_DESCRIPTOR *ppSecurityDescriptor)

BOOL WINAPI	GetWindowsAccountDomainSid (PSID sid, PSID domain_sid, DWORD *size)

BOOL WINAPI	EqualDomainSid (IN PSID pSid1, IN PSID pSid2, OUT BOOL *pfEqual)

Variables
static const WELLKNOWNSID	WellKnownSids []

static const WELLKNOWNRID	WellKnownRids []

static const SID	sidWorld = { SID_REVISION, 1, { SECURITY_WORLD_SID_AUTHORITY} , { SECURITY_WORLD_RID } }

static const WCHAR	SDDL_NO_READ_UP [] = {'N','R',0}

static const WCHAR	SDDL_NO_WRITE_UP [] = {'N','W',0}

static const WCHAR	SDDL_NO_EXECUTE_UP [] = {'N','X',0}

static const WCHAR	SDDL_ACCESS_ALLOWED [] = {'A',0}

static const WCHAR	SDDL_ACCESS_DENIED [] = {'D',0}

static const WCHAR	SDDL_OBJECT_ACCESS_ALLOWED [] = {'O','A',0}

static const WCHAR	SDDL_OBJECT_ACCESS_DENIED [] = {'O','D',0}

static const WCHAR	SDDL_AUDIT [] = {'A','U',0}

static const WCHAR	SDDL_ALARM [] = {'A','L',0}

static const WCHAR	SDDL_MANDATORY_LABEL [] = {'M','L',0}

static const WCHAR	SDDL_OBJECT_AUDIT [] = {'O','U',0}

static const WCHAR	SDDL_OBJECT_ALARM [] = {'O','L',0}

static const WCHAR	SDDL_CONTAINER_INHERIT [] = {'C','I',0}

static const WCHAR	SDDL_OBJECT_INHERIT [] = {'O','I',0}

static const WCHAR	SDDL_NO_PROPAGATE [] = {'N','P',0}

static const WCHAR	SDDL_INHERIT_ONLY [] = {'I','O',0}

static const WCHAR	SDDL_INHERITED [] = {'I','D',0}

static const WCHAR	SDDL_AUDIT_SUCCESS [] = {'S','A',0}

static const WCHAR	SDDL_AUDIT_FAILURE [] = {'F','A',0}

static const ACEFLAG	AceType []

static const ACEFLAG	AceFlags []

static const ACEFLAG	AceRights []

static const LPCWSTR	AceRightBitNames [32]

Macro Definition Documentation

◆ ADS_RIGHT_ACTRL_DS_LIST

#define ADS_RIGHT_ACTRL_DS_LIST 0x0004

Definition at line 157 of file security.c.

◆ ADS_RIGHT_DS_CONTROL_ACCESS

#define ADS_RIGHT_DS_CONTROL_ACCESS 0x0100

Definition at line 163 of file security.c.

◆ ADS_RIGHT_DS_CREATE_CHILD

#define ADS_RIGHT_DS_CREATE_CHILD 0x0001

Definition at line 155 of file security.c.

◆ ADS_RIGHT_DS_DELETE_CHILD

#define ADS_RIGHT_DS_DELETE_CHILD 0x0002

Definition at line 156 of file security.c.

◆ ADS_RIGHT_DS_DELETE_TREE

#define ADS_RIGHT_DS_DELETE_TREE 0x0040

Definition at line 161 of file security.c.

◆ ADS_RIGHT_DS_LIST_OBJECT

#define ADS_RIGHT_DS_LIST_OBJECT 0x0080

Definition at line 162 of file security.c.

◆ ADS_RIGHT_DS_READ_PROP

#define ADS_RIGHT_DS_READ_PROP 0x0010

Definition at line 159 of file security.c.

◆ ADS_RIGHT_DS_SELF

#define ADS_RIGHT_DS_SELF 0x0008

Definition at line 158 of file security.c.

◆ ADS_RIGHT_DS_WRITE_PROP

#define ADS_RIGHT_DS_WRITE_PROP 0x0020

Definition at line 160 of file security.c.

Typedef Documentation

◆ ACEFLAG

typedef struct _ACEFLAG ACEFLAG

◆ LPACEFLAG

typedef struct _ACEFLAG * LPACEFLAG

◆ MAX_SID

typedef struct _MAX_SID MAX_SID

◆ WELLKNOWNRID

typedef struct WELLKNOWNRID WELLKNOWNRID

◆ WELLKNOWNSID

typedef struct WELLKNOWNSID WELLKNOWNSID

Function Documentation

◆ AccessCheck()

BOOL WINAPI AccessCheck	(	IN PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		IN HANDLE	ClientToken,
		IN DWORD	DesiredAccess,
		IN PGENERIC_MAPPING	GenericMapping,
		OUT PPRIVILEGE_SET PrivilegeSet	OPTIONAL,
		IN OUT LPDWORD	PrivilegeSetLength,
		OUT LPDWORD	GrantedAccess,
		OUT LPBOOL	AccessStatus
	)

Definition at line 1529 of file security.c.

 {
     NTSTATUS Status;
     NTSTATUS NtAccessStatus;
 
     /* Do the access check */
     Status = NtAccessCheck(pSecurityDescriptor,
                            ClientToken,
                            DesiredAccess,
                            GenericMapping,
                            PrivilegeSet,
                            (PULONG)PrivilegeSetLength,
                            (PACCESS_MASK)GrantedAccess,
                            &NtAccessStatus);
 
     /* See if the access check operation succeeded */
     if (!NT_SUCCESS(Status))
     {
         /* Check failed */
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     /* Now check the access status  */
     if (!NT_SUCCESS(NtAccessStatus))
     {
         /* Access denied */
         SetLastError(RtlNtStatusToDosError(NtAccessStatus));
         *AccessStatus = FALSE;
     }
     else
     {
         /* Access granted */
         *AccessStatus = TRUE;
     }
 
     /* Check succeeded */
     return TRUE;
 }

Referenced by test_AccessCheck(), test_default_handle_security(), and test_FileSecurity().

◆ AccessCheckByType()

BOOL WINAPI AccessCheckByType	(	PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		PSID	PrincipalSelfSid,
		HANDLE	ClientToken,
		DWORD	DesiredAccess,
		POBJECT_TYPE_LIST	ObjectTypeList,
		DWORD	ObjectTypeListLength,
		PGENERIC_MAPPING	GenericMapping,
		PPRIVILEGE_SET	PrivilegeSet,
		LPDWORD	PrivilegeSetLength,
		LPDWORD	GrantedAccess,
		LPBOOL	AccessStatus
	)

Definition at line 1579 of file security.c.

 {
     FIXME("stub\n");
 
     *AccessStatus = TRUE;
 
     return !*AccessStatus;
 }

◆ AddAccessAllowedAce()

BOOL WINAPI AddAccessAllowedAce	(	PACL	pAcl,
		DWORD	dwAceRevision,
		DWORD	AccessMask,
		PSID	pSid
	)

Definition at line 918 of file security.c.

 {
     NTSTATUS Status;
 
     Status = RtlAddAccessAllowedAce(pAcl,
                                     dwAceRevision,
                                     AccessMask,
                                     pSid);
     if (!NT_SUCCESS(Status))
     {
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     return TRUE;
 }

Referenced by AccRewriteSetEntriesInAcl(), AddAceToDesktop(), convert_nfs4acl_2_dacl(), CreateDefaultSecurityDescriptor(), CreateWindowStationAndDesktops(), GetShellSecurityDescriptor(), test_AccessCheck(), test_AddMandatoryAce(), test_GetExplicitEntriesFromAclW(), test_process_security(), test_SetEntriesInAclA(), and test_SetEntriesInAclW().

◆ AddAccessAllowedAceEx()

BOOL WINAPI AddAccessAllowedAceEx	(	PACL	pAcl,
		DWORD	dwAceRevision,
		DWORD	AceFlags,
		DWORD	AccessMask,
		PSID	pSid
	)

Definition at line 942 of file security.c.

 {
     NTSTATUS Status;
 
     Status = RtlAddAccessAllowedAceEx(pAcl,
                                       dwAceRevision,
                                       AceFlags,
                                       AccessMask,
                                       pSid);
     if (!NT_SUCCESS(Status))
     {
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     return TRUE;
 }

Referenced by get_sd(), and GetShellSecurityDescriptor().

◆ AddAccessDeniedAce()

BOOL WINAPI AddAccessDeniedAce	(	PACL	pAcl,
		DWORD	dwAceRevision,
		DWORD	AccessMask,
		PSID	pSid
	)

Definition at line 969 of file security.c.

 {
     NTSTATUS Status;
 
     Status = RtlAddAccessDeniedAce(pAcl,
                                    dwAceRevision,
                                    AccessMask,
                                    pSid);
     if (!NT_SUCCESS(Status))
     {
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     return TRUE;
 }

Referenced by AccRewriteSetEntriesInAcl(), convert_nfs4acl_2_dacl(), GetShellSecurityDescriptor(), test_AccessCheck(), and test_process_security().

◆ AddAccessDeniedAceEx()

BOOL WINAPI AddAccessDeniedAceEx	(	PACL	pAcl,
		DWORD	dwAceRevision,
		DWORD	AceFlags,
		DWORD	AccessMask,
		PSID	pSid
	)

Definition at line 993 of file security.c.

 {
     NTSTATUS Status;
 
     Status = RtlAddAccessDeniedAceEx(pAcl,
                                      dwAceRevision,
                                      AceFlags,
                                      AccessMask,
                                      pSid);
     if (!NT_SUCCESS(Status))
     {
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     return TRUE;
 }

Referenced by GetShellSecurityDescriptor().

◆ AddAce()

BOOL WINAPI AddAce	(	PACL	pAcl,
		DWORD	dwAceRevision,
		DWORD	dwStartingAceIndex,
		LPVOID	pAceList,
		DWORD	nAceListLength
	)

Definition at line 1020 of file security.c.

 {
     NTSTATUS Status;
 
     Status = RtlAddAce(pAcl,
                        dwAceRevision,
                        dwStartingAceIndex,
                        pAceList,
                        nAceListLength);
     if (!NT_SUCCESS(Status))
     {
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     return TRUE;
 }

Referenced by AddAceToWindowStation(), and test_AddAce().

◆ AddAuditAccessAce()

BOOL WINAPI AddAuditAccessAce	(	PACL	pAcl,
		DWORD	dwAceRevision,
		DWORD	dwAccessMask,
		PSID	pSid,
		BOOL	bAuditSuccess,
		BOOL	bAuditFailure
	)

Definition at line 1627 of file security.c.

 {
     NTSTATUS Status;
 
     Status = RtlAddAuditAccessAce(pAcl,
                                   dwAceRevision,
                                   dwAccessMask,
                                   pSid,
                                   bAuditSuccess,
                                   bAuditFailure);
     if (!NT_SUCCESS(Status))
     {
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     return TRUE;
 }

◆ AddAuditAccessAceEx()

BOOL WINAPI AddAuditAccessAceEx	(	PACL	pAcl,
		DWORD	dwAceRevision,
		DWORD	AceFlags,
		DWORD	dwAccessMask,
		PSID	pSid,
		BOOL	bAuditSuccess,
		BOOL	bAuditFailure
	)

Definition at line 1655 of file security.c.

 {
     NTSTATUS Status;
 
     Status = RtlAddAuditAccessAceEx(pAcl,
                                     dwAceRevision,
                                     AceFlags,
                                     dwAccessMask,
                                     pSid,
                                     bAuditSuccess,
                                     bAuditFailure);
     if (!NT_SUCCESS(Status))
     {
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     return TRUE;
 }

◆ AdjustTokenGroups()

BOOL WINAPI AdjustTokenGroups	(	HANDLE	TokenHandle,
		BOOL	ResetToDefault,
		PTOKEN_GROUPS	NewState,
		DWORD	BufferLength,
		PTOKEN_GROUPS	PreviousState,
		PDWORD	ReturnLength
	)

Definition at line 348 of file security.c.

 {
     NTSTATUS Status;
 
     Status = NtAdjustGroupsToken(TokenHandle,
                                  ResetToDefault,
                                  NewState,
                                  BufferLength,
                                  PreviousState,
                                  (PULONG)ReturnLength);
     if (!NT_SUCCESS(Status))
     {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
     }
 
     return TRUE;
 }

◆ AdjustTokenPrivileges()

BOOL WINAPI AdjustTokenPrivileges	(	HANDLE	TokenHandle,
		BOOL	DisableAllPrivileges,
		PTOKEN_PRIVILEGES	NewState,
		DWORD	BufferLength,
		PTOKEN_PRIVILEGES	PreviousState,
		PDWORD	ReturnLength
	)

Definition at line 376 of file security.c.

 {
     NTSTATUS Status;
 
     Status = NtAdjustPrivilegesToken(TokenHandle,
                                      DisableAllPrivileges,
                                      NewState,
                                      BufferLength,
                                      PreviousState,
                                      (PULONG)ReturnLength);
     if (STATUS_NOT_ALL_ASSIGNED == Status)
     {
         SetLastError(ERROR_NOT_ALL_ASSIGNED);
         return TRUE;
     }
 
     if (!NT_SUCCESS(Status))
     {
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     /* AdjustTokenPrivileges is documented to do this */
     SetLastError(ERROR_SUCCESS);
 
     return TRUE;
 }

Referenced by AcquireRemoveRestorePrivilege(), AddDeviceW(), EnablePrivilege(), EnableProcessPrivileges(), CShellCommandSACL::Execute(), FormatEx2(), InstallReactOS(), named_pipe_client_func(), PauseBalanceW(), Privilege(), pSetupEnablePrivilege(), RecvSubvolGUIW(), RecvSubvolW(), RemoveDeviceW(), ResetStatsW(), ResizeDeviceW(), ScmEnableBackupRestorePrivileges(), SendSubvolGUIW(), SendSubvolW(), set_privilege(), set_privileges(), SetDriverLoadPrivilege(), SetPrivilege(), ShowScrubW(), ShutdownSystem(), StartBalanceW(), StartScrubW(), StopBalanceW(), StopScrubW(), SystemSetLocalTime(), SystemSetTime(), test8(), test_AdjustTokenPrivileges(), test_noprivileges(), test_SetFileValidData(), test_system_security_access(), UpdateDriver(), WinMain(), and wWinMain().

◆ ADVAPI_GetComputerSid()

BOOL ADVAPI_GetComputerSid ( PSID sid )

Definition at line 275 of file security.c.

 {
     static const struct /* same fields as struct SID */
     {
         BYTE Revision;
         BYTE SubAuthorityCount;
         SID_IDENTIFIER_AUTHORITY IdentifierAuthority;
         DWORD SubAuthority[4];
     } computer_sid =
     { SID_REVISION, 4, { SECURITY_NT_AUTHORITY }, { SECURITY_NT_NON_UNIQUE, 0, 0, 0 } };
 
     memcpy( sid, &computer_sid, sizeof(computer_sid) );
     return TRUE;
 }

Referenced by ComputeStringSidSize(), and ParseStringSidToSid().

◆ ADVAPI_IsLocalComputer()

BOOL ADVAPI_IsLocalComputer ( LPCWSTR ServerName )

Definition at line 253 of file security.c.

 {
     DWORD dwSize = MAX_COMPUTERNAME_LENGTH + 1;
     BOOL Result;
     LPWSTR buf;
 
     if (!ServerName || !ServerName[0])
         return TRUE;
 
     buf = heap_alloc(dwSize * sizeof(WCHAR));
     Result = GetComputerNameW(buf,  &dwSize);
     if (Result && (ServerName[0] == '\\') && (ServerName[1] == '\\'))
         ServerName += 2;
     Result = Result && !lstrcmpW(ServerName, buf);
     heap_free(buf);
 
     return Result;
 }

◆ AllocateAndInitializeSid()

BOOL WINAPI AllocateAndInitializeSid	(	PSID_IDENTIFIER_AUTHORITY	pIdentifierAuthority,
		BYTE	nSubAuthorityCount,
		DWORD	nSubAuthority0,
		DWORD	nSubAuthority1,
		DWORD	nSubAuthority2,
		DWORD	nSubAuthority3,
		DWORD	nSubAuthority4,
		DWORD	nSubAuthority5,
		DWORD	nSubAuthority6,
		DWORD	nSubAuthority7,
		PSID *	pSid
	)

Definition at line 553 of file security.c.

 {
     return set_ntstatus( RtlAllocateAndInitializeSid(
                              pIdentifierAuthority, nSubAuthorityCount,
                              nSubAuthority0, nSubAuthority1, nSubAuthority2, nSubAuthority3,
                              nSubAuthority4, nSubAuthority5, nSubAuthority6, nSubAuthority7,
                              pSid ));
 }

Referenced by check_wellknown_name(), CheckForGuestsAndAdmins(), CreateDefaultSecurityDescriptor(), CreateLogoffSecurityAttributes(), GetShellSecurityDescriptor(), is_process_limited(), is_token_admin(), IsNTAdmin(), IsUserAdmin(), PerfDataInitialize(), pSetupIsUserAdmin(), SHTestTokenMembership(), test_AccessCheck(), test_AddMandatoryAce(), test_CreateWellKnownSid(), test_EqualSid(), test_GetExplicitEntriesFromAclW(), test_GetNamedSecurityInfoA(), test_GetSecurityInfo(), test_LookupAccountSid(), test_process_security(), test_reg_create_key(), test_reg_open_key(), test_SetEntriesInAclA(), test_SetEntriesInAclW(), test_sid(), and test_trustee().

◆ AllocateLocallyUniqueId()

BOOL WINAPI AllocateLocallyUniqueId ( PLUID Luid )

Definition at line 1097 of file security.c.

 {
     NTSTATUS Status;
 
     Status = NtAllocateLocallyUniqueId (Luid);
     if (!NT_SUCCESS (Status))
     {
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     return TRUE;
 }

Referenced by CookupNodeId(), LogonUserExW(), MyLogonUser(), and wined3d_adapter_init().

◆ AreAllAccessesGranted()

BOOL WINAPI AreAllAccessesGranted	(	DWORD	GrantedAccess,
		DWORD	DesiredAccess
	)

Definition at line 2208 of file security.c.

 {
     return (BOOL)RtlAreAllAccessesGranted(GrantedAccess,
                                           DesiredAccess);
 }

◆ AreAnyAccessesGranted()

BOOL WINAPI AreAnyAccessesGranted	(	DWORD	GrantedAccess,
		DWORD	DesiredAccess
	)

Definition at line 2220 of file security.c.

 {
     return (BOOL)RtlAreAnyAccessesGranted(GrantedAccess,
                                           DesiredAccess);
 }

◆ BuildExplicitAccessWithNameA()

VOID WINAPI BuildExplicitAccessWithNameA	(	PEXPLICIT_ACCESSA	pExplicitAccess,
		LPSTR	pTrusteeName,
		DWORD	AccessPermissions,
		ACCESS_MODE	AccessMode,
		DWORD	Inheritance
	)

Definition at line 1806 of file security.c.

 {
     pExplicitAccess->grfAccessPermissions = AccessPermissions;
     pExplicitAccess->grfAccessMode = AccessMode;
     pExplicitAccess->grfInheritance = Inheritance;
 
     pExplicitAccess->Trustee.pMultipleTrustee = NULL;
     pExplicitAccess->Trustee.MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
     pExplicitAccess->Trustee.TrusteeForm = TRUSTEE_IS_NAME;
     pExplicitAccess->Trustee.TrusteeType = TRUSTEE_IS_UNKNOWN;
     pExplicitAccess->Trustee.ptstrName = pTrusteeName;
 }

◆ BuildExplicitAccessWithNameW()

VOID WINAPI BuildExplicitAccessWithNameW	(	PEXPLICIT_ACCESSW	pExplicitAccess,
		LPWSTR	pTrusteeName,
		DWORD	AccessPermissions,
		ACCESS_MODE	AccessMode,
		DWORD	Inheritance
	)

Definition at line 1828 of file security.c.

 {
     pExplicitAccess->grfAccessPermissions = AccessPermissions;
     pExplicitAccess->grfAccessMode = AccessMode;
     pExplicitAccess->grfInheritance = Inheritance;
 
     pExplicitAccess->Trustee.pMultipleTrustee = NULL;
     pExplicitAccess->Trustee.MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
     pExplicitAccess->Trustee.TrusteeForm = TRUSTEE_IS_NAME;
     pExplicitAccess->Trustee.TrusteeType = TRUSTEE_IS_UNKNOWN;
     pExplicitAccess->Trustee.ptstrName = pTrusteeName;
 }

◆ BuildTrusteeWithNameA()

VOID WINAPI BuildTrusteeWithNameA	(	PTRUSTEE_A	pTrustee,
		LPSTR	name
	)

Definition at line 2051 of file security.c.

 {
     TRACE("%p %s\n", pTrustee, name);
 
     pTrustee->pMultipleTrustee = NULL;
     pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
     pTrustee->TrusteeForm = TRUSTEE_IS_NAME;
     pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
     pTrustee->ptstrName = name;
 }

◆ BuildTrusteeWithNameW()

VOID WINAPI BuildTrusteeWithNameW	(	PTRUSTEE_W	pTrustee,
		LPWSTR	name
	)

Definition at line 2067 of file security.c.

 {
     TRACE("%p %s\n", pTrustee, name);
 
     pTrustee->pMultipleTrustee = NULL;
     pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
     pTrustee->TrusteeForm = TRUSTEE_IS_NAME;
     pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
     pTrustee->ptstrName = name;
 }

◆ BuildTrusteeWithObjectsAndNameA()

VOID WINAPI BuildTrusteeWithObjectsAndNameA	(	PTRUSTEEA	pTrustee,
		POBJECTS_AND_NAME_A	pObjName,
		SE_OBJECT_TYPE	ObjectType,
		LPSTR	ObjectTypeName,
		LPSTR	InheritedObjectTypeName,
		LPSTR	Name
	)

Definition at line 1848 of file security.c.

 {
     DWORD ObjectsPresent = 0;
 
     TRACE("%p %p 0x%08x %p %p %s\n", pTrustee, pObjName,
           ObjectType, ObjectTypeName, InheritedObjectTypeName, debugstr_a(Name));
 
     /* Fill the OBJECTS_AND_NAME structure */
     pObjName->ObjectType = ObjectType;
     if (ObjectTypeName != NULL)
     {
         ObjectsPresent |= ACE_OBJECT_TYPE_PRESENT;
     }
 
     pObjName->InheritedObjectTypeName = InheritedObjectTypeName;
     if (InheritedObjectTypeName != NULL)
     {
         ObjectsPresent |= ACE_INHERITED_OBJECT_TYPE_PRESENT;
     }
 
     pObjName->ObjectsPresent = ObjectsPresent;
     pObjName->ptstrName = Name;
 
     /* Fill the TRUSTEE structure */
     pTrustee->pMultipleTrustee = NULL;
     pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
     pTrustee->TrusteeForm = TRUSTEE_IS_OBJECTS_AND_NAME;
     pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
     pTrustee->ptstrName = (LPSTR)pObjName;
 }

◆ BuildTrusteeWithObjectsAndNameW()

VOID WINAPI BuildTrusteeWithObjectsAndNameW	(	PTRUSTEEW	pTrustee,
		POBJECTS_AND_NAME_W	pObjName,
		SE_OBJECT_TYPE	ObjectType,
		LPWSTR	ObjectTypeName,
		LPWSTR	InheritedObjectTypeName,
		LPWSTR	Name
	)

Definition at line 1884 of file security.c.

 {
     DWORD ObjectsPresent = 0;
 
     TRACE("%p %p 0x%08x %p %p %s\n", pTrustee, pObjName,
           ObjectType, ObjectTypeName, InheritedObjectTypeName, debugstr_w(Name));
 
     /* Fill the OBJECTS_AND_NAME structure */
     pObjName->ObjectType = ObjectType;
     if (ObjectTypeName != NULL)
     {
         ObjectsPresent |= ACE_OBJECT_TYPE_PRESENT;
     }
 
     pObjName->InheritedObjectTypeName = InheritedObjectTypeName;
     if (InheritedObjectTypeName != NULL)
     {
         ObjectsPresent |= ACE_INHERITED_OBJECT_TYPE_PRESENT;
     }
 
     pObjName->ObjectsPresent = ObjectsPresent;
     pObjName->ptstrName = Name;
 
     /* Fill the TRUSTEE structure */
     pTrustee->pMultipleTrustee = NULL;
     pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
     pTrustee->TrusteeForm = TRUSTEE_IS_OBJECTS_AND_NAME;
     pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
     pTrustee->ptstrName = (LPWSTR)pObjName;
 }

◆ BuildTrusteeWithObjectsAndSidA()

VOID WINAPI BuildTrusteeWithObjectsAndSidA	(	PTRUSTEEA	pTrustee,
		POBJECTS_AND_SID	pObjSid,
		GUID *	pObjectGuid,
		GUID *	pInheritedObjectGuid,
		PSID	pSid
	)

Definition at line 1921 of file security.c.

 {
     DWORD ObjectsPresent = 0;
 
     TRACE("%p %p %p %p %p\n", pTrustee, pObjSid, pObjectGuid, pInheritedObjectGuid, pSid);
 
     /* Fill the OBJECTS_AND_SID structure */
     if (pObjectGuid != NULL)
     {
         pObjSid->ObjectTypeGuid = *pObjectGuid;
         ObjectsPresent |= ACE_OBJECT_TYPE_PRESENT;
     }
     else
     {
         ZeroMemory(&pObjSid->ObjectTypeGuid,
                    sizeof(GUID));
     }
 
     if (pInheritedObjectGuid != NULL)
     {
         pObjSid->InheritedObjectTypeGuid = *pInheritedObjectGuid;
         ObjectsPresent |= ACE_INHERITED_OBJECT_TYPE_PRESENT;
     }
     else
     {
         ZeroMemory(&pObjSid->InheritedObjectTypeGuid,
                    sizeof(GUID));
     }
 
     pObjSid->ObjectsPresent = ObjectsPresent;
     pObjSid->pSid = pSid;
 
     /* Fill the TRUSTEE structure */
     pTrustee->pMultipleTrustee = NULL;
     pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
     pTrustee->TrusteeForm = TRUSTEE_IS_OBJECTS_AND_SID;
     pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
     pTrustee->ptstrName = (LPSTR) pObjSid;
 }

◆ BuildTrusteeWithObjectsAndSidW()

VOID WINAPI BuildTrusteeWithObjectsAndSidW	(	PTRUSTEEW	pTrustee,
		POBJECTS_AND_SID	pObjSid,
		GUID *	pObjectGuid,
		GUID *	pInheritedObjectGuid,
		PSID	pSid
	)

Definition at line 1970 of file security.c.

 {
     DWORD ObjectsPresent = 0;
 
     TRACE("%p %p %p %p %p\n", pTrustee, pObjSid, pObjectGuid, pInheritedObjectGuid, pSid);
 
     /* Fill the OBJECTS_AND_SID structure */
     if (pObjectGuid != NULL)
     {
         pObjSid->ObjectTypeGuid = *pObjectGuid;
         ObjectsPresent |= ACE_OBJECT_TYPE_PRESENT;
     }
     else
     {
         ZeroMemory(&pObjSid->ObjectTypeGuid,
                    sizeof(GUID));
     }
 
     if (pInheritedObjectGuid != NULL)
     {
         pObjSid->InheritedObjectTypeGuid = *pInheritedObjectGuid;
         ObjectsPresent |= ACE_INHERITED_OBJECT_TYPE_PRESENT;
     }
     else
     {
         ZeroMemory(&pObjSid->InheritedObjectTypeGuid,
                    sizeof(GUID));
     }
 
     pObjSid->ObjectsPresent = ObjectsPresent;
     pObjSid->pSid = pSid;
 
     /* Fill the TRUSTEE structure */
     pTrustee->pMultipleTrustee = NULL;
     pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
     pTrustee->TrusteeForm = TRUSTEE_IS_OBJECTS_AND_SID;
     pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
     pTrustee->ptstrName = (LPWSTR) pObjSid;
 }

◆ BuildTrusteeWithSidA()

VOID WINAPI BuildTrusteeWithSidA	(	PTRUSTEE_A	pTrustee,
		PSID	pSid
	)

Definition at line 2018 of file security.c.

 {
     TRACE("%p %p\n", pTrustee, pSid);
 
     pTrustee->pMultipleTrustee = NULL;
     pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
     pTrustee->TrusteeForm = TRUSTEE_IS_SID;
     pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
     pTrustee->ptstrName = (LPSTR) pSid;
 }

◆ BuildTrusteeWithSidW()

VOID WINAPI BuildTrusteeWithSidW	(	PTRUSTEE_W	pTrustee,
		PSID	pSid
	)

Definition at line 2035 of file security.c.

 {
     TRACE("%p %p\n", pTrustee, pSid);
 
     pTrustee->pMultipleTrustee = NULL;
     pTrustee->MultipleTrusteeOperation = NO_MULTIPLE_TRUSTEE;
     pTrustee->TrusteeForm = TRUSTEE_IS_SID;
     pTrustee->TrusteeType = TRUSTEE_IS_UNKNOWN;
     pTrustee->ptstrName = (LPWSTR) pSid;
 }

◆ ComputeStringSidSize()

static DWORD ComputeStringSidSize ( LPCWSTR StringSid )

static

Definition at line 3469 of file security.c.

 {
     if (StringSid[0] == 'S' && StringSid[1] == '-') /* S-R-I(-S)+ */
     {
         int ctok = 0;
         while (*StringSid)
         {
             if (*StringSid == '-')
                 ctok++;
             StringSid++;
         }
 
         if (ctok >= 3)
             return GetSidLengthRequired(ctok - 2);
     }
     else /* String constant format  - Only available in winxp and above */
     {
         unsigned int i;
 
         for (i = 0; i < sizeof(WellKnownSids)/sizeof(WellKnownSids[0]); i++)
             if (!strncmpW(WellKnownSids[i].wstr, StringSid, 2))
                 return GetSidLengthRequired(WellKnownSids[i].Sid.SubAuthorityCount);
 
         for (i = 0; i < sizeof(WellKnownRids)/sizeof(WellKnownRids[0]); i++)
             if (!strncmpW(WellKnownRids[i].wstr, StringSid, 2))
             {
                 MAX_SID local;
                 ADVAPI_GetComputerSid(&local);
                 return GetSidLengthRequired(*GetSidSubAuthorityCount(&local) + 1);
             }
 
     }
 
     return GetSidLengthRequired(0);
 }

Referenced by ParseStringSidToSid().

◆ ConvertSecurityDescriptorToStringSecurityDescriptorA()

BOOL WINAPI ConvertSecurityDescriptorToStringSecurityDescriptorA	(	PSECURITY_DESCRIPTOR	SecurityDescriptor,
		DWORD	SDRevision,
		SECURITY_INFORMATION	Information,
		LPSTR *	OutputString,
		PULONG	OutputLen
	)

Definition at line 3175 of file security.c.

 {
     LPWSTR wstr;
     ULONG len;
     if (ConvertSecurityDescriptorToStringSecurityDescriptorW(SecurityDescriptor, SDRevision, Information, &wstr, &len))
     {
         int lenA;
 
         lenA = WideCharToMultiByte(CP_ACP, 0, wstr, len, NULL, 0, NULL, NULL);
         *OutputString = heap_alloc(lenA);
 #ifdef __REACTOS__
         if (*OutputString == NULL)
         {
             LocalFree(wstr);
             *OutputLen = 0;
             return FALSE;
         }
 #endif
         WideCharToMultiByte(CP_ACP, 0, wstr, len, *OutputString, lenA, NULL, NULL);
         LocalFree(wstr);
 
         if (OutputLen != NULL)
             *OutputLen = lenA;
         return TRUE;
     }
     else
     {
         *OutputString = NULL;
         if (OutputLen)
             *OutputLen = 0;
         return FALSE;
     }
 }

◆ ConvertSecurityDescriptorToStringSecurityDescriptorW()

BOOL WINAPI ConvertSecurityDescriptorToStringSecurityDescriptorW	(	PSECURITY_DESCRIPTOR	SecurityDescriptor,
		DWORD	SDRevision,
		SECURITY_INFORMATION	RequestedInformation,
		LPWSTR *	OutputString,
		PULONG	OutputLen
	)

Definition at line 3111 of file security.c.

 {
     ULONG len;
     WCHAR *wptr, *wstr;
 
     if (SDRevision != SDDL_REVISION_1)
     {
         ERR("Program requested unknown SDDL revision %d\n", SDRevision);
         SetLastError(ERROR_UNKNOWN_REVISION);
         return FALSE;
     }
 
     len = 0;
     if (RequestedInformation & OWNER_SECURITY_INFORMATION)
         if (!DumpOwner(SecurityDescriptor, NULL, &len))
             return FALSE;
     if (RequestedInformation & GROUP_SECURITY_INFORMATION)
         if (!DumpGroup(SecurityDescriptor, NULL, &len))
             return FALSE;
     if (RequestedInformation & DACL_SECURITY_INFORMATION)
         if (!DumpDacl(SecurityDescriptor, NULL, &len))
             return FALSE;
     if (RequestedInformation & SACL_SECURITY_INFORMATION)
         if (!DumpSacl(SecurityDescriptor, NULL, &len))
             return FALSE;
 
     wstr = wptr = LocalAlloc(0, (len + 1)*sizeof(WCHAR));
 #ifdef __REACTOS__
     if (wstr == NULL)
         return FALSE;
 #endif
 
     if (RequestedInformation & OWNER_SECURITY_INFORMATION)
         if (!DumpOwner(SecurityDescriptor, &wptr, NULL)) {
             LocalFree (wstr);
             return FALSE;
         }
     if (RequestedInformation & GROUP_SECURITY_INFORMATION)
         if (!DumpGroup(SecurityDescriptor, &wptr, NULL)) {
             LocalFree (wstr);
             return FALSE;
         }
     if (RequestedInformation & DACL_SECURITY_INFORMATION)
         if (!DumpDacl(SecurityDescriptor, &wptr, NULL)) {
             LocalFree (wstr);
             return FALSE;
         }
     if (RequestedInformation & SACL_SECURITY_INFORMATION)
         if (!DumpSacl(SecurityDescriptor, &wptr, NULL)) {
             LocalFree (wstr);
             return FALSE;
         }
     *wptr = 0;
 
     TRACE("ret: %s, %d\n", wine_dbgstr_w(wstr), len);
     *OutputString = wstr;
     if (OutputLen)
         *OutputLen = strlenW(*OutputString)+1;
     return TRUE;
 }

Referenced by ConvertSecurityDescriptorToStringSecurityDescriptorA().

◆ ConvertSidToStringSidA()

BOOL WINAPI ConvertSidToStringSidA	(	PSID	Sid,
		LPSTR *	StringSid
	)

Definition at line 3313 of file security.c.

 {
     LPWSTR StringSidW;
     int Len;
 
     if (!ConvertSidToStringSidW(Sid, &StringSidW))
     {
         return FALSE;
     }
 
     Len = WideCharToMultiByte(CP_ACP, 0, StringSidW, -1, NULL, 0, NULL, NULL);
     if (Len <= 0)
     {
         LocalFree(StringSidW);
         SetLastError(ERROR_NOT_ENOUGH_MEMORY);
         return FALSE;
     }
 
     *StringSid = LocalAlloc(LMEM_FIXED, Len);
     if (NULL == *StringSid)
     {
         LocalFree(StringSidW);
         SetLastError(ERROR_NOT_ENOUGH_MEMORY);
         return FALSE;
     }
 
     if (!WideCharToMultiByte(CP_ACP, 0, StringSidW, -1, *StringSid, Len, NULL, NULL))
     {
         LocalFree(StringSid);
         LocalFree(StringSidW);
         return FALSE;
     }
 
     LocalFree(StringSidW);
 
     return TRUE;
 }

Referenced by debugstr_sid(), init_functionpointers(), map_name_2_sid(), test_CreateWellKnownSid(), test_LookupAccountSid(), test_lsa(), test_sid(), test_sid_str(), test_token_attr(), and test_token_label().

◆ ConvertSidToStringSidW()

BOOL WINAPI ConvertSidToStringSidW	(	PSID	Sid,
		LPWSTR *	StringSid
	)

Definition at line 3259 of file security.c.

 {
     NTSTATUS Status;
     UNICODE_STRING UnicodeString;
     WCHAR FixedBuffer[64];
 
     if (!RtlValidSid(Sid))
     {
         SetLastError(ERROR_INVALID_SID);
         return FALSE;
     }
 
     UnicodeString.Length = 0;
     UnicodeString.MaximumLength = sizeof(FixedBuffer);
     UnicodeString.Buffer = FixedBuffer;
     Status = RtlConvertSidToUnicodeString(&UnicodeString, Sid, FALSE);
     if (STATUS_BUFFER_TOO_SMALL == Status)
     {
         Status = RtlConvertSidToUnicodeString(&UnicodeString, Sid, TRUE);
     }
 
     if (!NT_SUCCESS(Status))
     {
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     *StringSid = LocalAlloc(LMEM_FIXED, UnicodeString.Length + sizeof(WCHAR));
     if (NULL == *StringSid)
     {
         if (UnicodeString.Buffer != FixedBuffer)
         {
             RtlFreeUnicodeString(&UnicodeString);
         }
       SetLastError(ERROR_NOT_ENOUGH_MEMORY);
       return FALSE;
     }
 
     MoveMemory(*StringSid, UnicodeString.Buffer, UnicodeString.Length);
     ZeroMemory((PCHAR) *StringSid + UnicodeString.Length, sizeof(WCHAR));
     if (UnicodeString.Buffer != FixedBuffer)
     {
         RtlFreeUnicodeString(&UnicodeString);
     }
 
     return TRUE;
 }

Referenced by _GetUserSidStringFromToken(), AddUserProfiles(), ConvertSidToStringSidA(), CreateUserProfileExW(), get_user_sid(), GetEventUserName(), GetPrincipalDisplayString(), LsapGetDomainInfo(), LsapLookupAccountDomainSids(), LsapLookupBuiltinDomainSids(), LsapLookupWellKnownSids(), MsiSourceListAddSourceW(), RecycleBin5_Constructor(), SampAddMemberToAlias(), SampRemoveMemberFromAlias(), SampRemoveMemberFromAllAliases(), SampSetupAddMemberToAlias(), set_user_sid_prop(), START_TEST(), UpdatePrincipalInfo(), WhoamiGroups(), WhoamiLogonId(), and WhoamiUser().

◆ ConvertStringSecurityDescriptorToSecurityDescriptorA()

BOOL WINAPI ConvertStringSecurityDescriptorToSecurityDescriptorA	(	LPCSTR	StringSecurityDescriptor,
		DWORD	StringSDRevision,
		PSECURITY_DESCRIPTOR *	SecurityDescriptor,
		PULONG	SecurityDescriptorSize
	)

Definition at line 2708 of file security.c.

 {
     UINT len;
     BOOL ret = FALSE;
     LPWSTR StringSecurityDescriptorW;
 
     len = MultiByteToWideChar(CP_ACP, 0, StringSecurityDescriptor, -1, NULL, 0);
     StringSecurityDescriptorW = HeapAlloc(GetProcessHeap(), 0, len * sizeof(WCHAR));
 
     if (StringSecurityDescriptorW)
     {
         MultiByteToWideChar(CP_ACP, 0, StringSecurityDescriptor, -1, StringSecurityDescriptorW, len);
 
         ret = ConvertStringSecurityDescriptorToSecurityDescriptorW(StringSecurityDescriptorW,
                                                                    StringSDRevision, SecurityDescriptor,
                                                                    SecurityDescriptorSize);
         HeapFree(GetProcessHeap(), 0, StringSecurityDescriptorW);
     }
 
     return ret;
 }

Referenced by test_profile_directory_readonly().

◆ ConvertStringSecurityDescriptorToSecurityDescriptorW()

BOOL WINAPI ConvertStringSecurityDescriptorToSecurityDescriptorW	(	LPCWSTR	StringSecurityDescriptor,
		DWORD	StringSDRevision,
		PSECURITY_DESCRIPTOR *	SecurityDescriptor,
		PULONG	SecurityDescriptorSize
	)

Definition at line 2738 of file security.c.

 {
     DWORD cBytes;
     SECURITY_DESCRIPTOR* psd;
     BOOL bret = FALSE;
 
     TRACE("%s\n", debugstr_w(StringSecurityDescriptor));
 
     if (GetVersion() & 0x80000000)
     {
         SetLastError(ERROR_CALL_NOT_IMPLEMENTED);
         goto lend;
     }
     else if (!StringSecurityDescriptor || !SecurityDescriptor)
     {
         SetLastError(ERROR_INVALID_PARAMETER);
         goto lend;
     }
     else if (StringSDRevision != SID_REVISION)
     {
         SetLastError(ERROR_UNKNOWN_REVISION);
         goto lend;
     }
 
     /* Compute security descriptor length */
     if (!ParseStringSecurityDescriptorToSecurityDescriptor(StringSecurityDescriptor,
         NULL, &cBytes))
         goto lend;
 
     psd = *SecurityDescriptor = LocalAlloc(GMEM_ZEROINIT, cBytes);
     if (!psd) goto lend;
 
     psd->Revision = SID_REVISION;
     psd->Control |= SE_SELF_RELATIVE;
 
     if (!ParseStringSecurityDescriptorToSecurityDescriptor(StringSecurityDescriptor,
              (SECURITY_DESCRIPTOR_RELATIVE *)psd, &cBytes))
     {
         LocalFree(psd);
         goto lend;
     }
 
     if (SecurityDescriptorSize)
         *SecurityDescriptorSize = cBytes;
 
     bret = TRUE;
 
 lend:
     TRACE(" ret=%d\n", bret);
     return bret;
 }

Referenced by ConvertStringSecurityDescriptorToSecurityDescriptorA(), InstallOneService(), registry_callback(), and SetupQueueCopyIndirectW().

◆ ConvertStringSidToSidA()

BOOL WINAPI ConvertStringSidToSidA	(	LPCSTR	StringSid,
		PSID *	Sid
	)

Definition at line 3236 of file security.c.

 {
     BOOL bret = FALSE;
 
     TRACE("%s, %p\n", debugstr_a(StringSid), Sid);
     if (GetVersion() & 0x80000000)
         SetLastError(ERROR_CALL_NOT_IMPLEMENTED);
     else if (!StringSid || !Sid)
         SetLastError(ERROR_INVALID_PARAMETER);
     else
     {
         WCHAR *wStringSid = SERV_dup(StringSid);
         bret = ConvertStringSidToSidW(wStringSid, Sid);
         heap_free(wStringSid);
     }
     return bret;
 }

Referenced by test_LsaLookupSids().

◆ ConvertStringSidToSidW()

BOOL WINAPI ConvertStringSidToSidW	(	LPCWSTR	StringSid,
		PSID *	Sid
	)

Definition at line 3212 of file security.c.

 {
     BOOL bret = FALSE;
     DWORD cBytes;
 
     TRACE("%s, %p\n", debugstr_w(StringSid), Sid);
     if (GetVersion() & 0x80000000)
         SetLastError(ERROR_CALL_NOT_IMPLEMENTED);
     else if (!StringSid || !Sid)
         SetLastError(ERROR_INVALID_PARAMETER);
     else if (ParseStringSidToSid(StringSid, NULL, &cBytes))
     {
         PSID pSid = *Sid = LocalAlloc(0, cBytes);
 
         bret = ParseStringSidToSid(StringSid, pSid, &cBytes);
         if (!bret)
             LocalFree(*Sid); 
     }
     return bret;
 }

Referenced by ConvertStringSidToSidA(), and fill_sid().

◆ CopySid()

BOOL WINAPI CopySid	(	DWORD	nDestinationSidLength,
		PSID	pDestinationSid,
		PSID	pSourceSid
	)

Definition at line 591 of file security.c.

 {
     return set_ntstatus(RtlCopySid(nDestinationSidLength, pDestinationSid, pSourceSid));
 }

Referenced by AccpLookupSidByName(), AccRewriteGetExplicitEntriesFromAcl(), AddAceToWindowStation(), AddPrincipalToList(), AuthzGetInformationFromContext(), AuthzInitializeContextFromSid(), BuildDefaultPrincipalAce(), CachedGetUserFromSid(), CacheLookupResults(), GetUserSid(), LookupAccountNameW(), QueueSidLookup(), ReloadPrincipalsList(), and test_LookupAccountSid().

◆ CreateProcessWithLogonW()

BOOL WINAPI CreateProcessWithLogonW	(	LPCWSTR	lpUsername,
		LPCWSTR	lpDomain,
		LPCWSTR	lpPassword,
		DWORD	dwLogonFlags,
		LPCWSTR	lpApplicationName,
		LPWSTR	lpCommandLine,
		DWORD	dwCreationFlags,
		LPVOID	lpEnvironment,
		LPCWSTR	lpCurrentDirectory,
		LPSTARTUPINFOW	lpStartupInfo,
		LPPROCESS_INFORMATION	lpProcessInformation
	)

Definition at line 3356 of file security.c.

 {
     FIXME("%s %s %s 0x%08x %s %s 0x%08x %p %s %p %p stub\n", debugstr_w(lpUsername), debugstr_w(lpDomain),
     debugstr_w(lpPassword), dwLogonFlags, debugstr_w(lpApplicationName),
     debugstr_w(lpCommandLine), dwCreationFlags, lpEnvironment, debugstr_w(lpCurrentDirectory),
     lpStartupInfo, lpProcessInformation);
 
     return FALSE;
 }

◆ CreateProcessWithTokenW()

BOOL WINAPI CreateProcessWithTokenW	(	HANDLE	token,
		DWORD	logon_flags,
		LPCWSTR	application_name,
		LPWSTR	command_line,
		DWORD	creation_flags,
		void *	environment,
		LPCWSTR	current_directory,
		STARTUPINFOW *	startup_info,
		PROCESS_INFORMATION *	process_information
	)

Definition at line 3376 of file security.c.

 {
     FIXME("%p 0x%08x %s %s 0x%08x %p %s %p %p - semi-stub\n", token,
           logon_flags, debugstr_w(application_name), debugstr_w(command_line),
           creation_flags, environment, debugstr_w(current_directory),
           startup_info, process_information);
 
     /* FIXME: check if handles should be inherited */
     return CreateProcessW( application_name, command_line, NULL, NULL, FALSE, creation_flags, environment,
                            current_directory, startup_info, process_information );
 }

◆ CreateRestrictedToken()

BOOL WINAPI CreateRestrictedToken	(	HANDLE	baseToken,
		DWORD	flags,
		DWORD	nDisableSids,
		PSID_AND_ATTRIBUTES	disableSids,
		DWORD	nDeletePrivs,
		PLUID_AND_ATTRIBUTES	deletePrivs,
		DWORD	nRestrictSids,
		PSID_AND_ATTRIBUTES	restrictSids,
		PHANDLE	newToken
	)

Definition at line 504 of file security.c.

 {
     TOKEN_TYPE type;
     SECURITY_IMPERSONATION_LEVEL level = SecurityAnonymous;
     DWORD size;
 
     FIXME("(%p, 0x%x, %u, %p, %u, %p, %u, %p, %p): stub\n",
           baseToken, flags, nDisableSids, disableSids,
           nDeletePrivs, deletePrivs,
           nRestrictSids, restrictSids,
           newToken);
 
     size = sizeof(type);
     if (!GetTokenInformation( baseToken, TokenType, &type, size, &size )) return FALSE;
     if (type == TokenImpersonation)
     {
         size = sizeof(level);
         if (!GetTokenInformation( baseToken, TokenImpersonationLevel, &level, size, &size ))
             return FALSE;
     }
     return DuplicateTokenEx( baseToken, MAXIMUM_ALLOWED, NULL, level, type, newToken );
 }

Referenced by test_token_security_descriptor().

◆ CreateWellKnownSid()

BOOL WINAPI CreateWellKnownSid	(	IN WELL_KNOWN_SID_TYPE	WellKnownSidType,
		IN PSID DomainSid	OPTIONAL,
		OUT PSID	pSid,
		IN OUT DWORD *	cbSid
	)

Definition at line 601 of file security.c.

 {
     unsigned int i;
     TRACE("(%d, %s, %p, %p)\n", WellKnownSidType, debugstr_sid(DomainSid), pSid, cbSid);
 
     if (cbSid == NULL || (DomainSid && !IsValidSid(DomainSid)))
     {
         SetLastError(ERROR_INVALID_PARAMETER);
         return FALSE;
     }
 
     for (i = 0; i < sizeof(WellKnownSids)/sizeof(WellKnownSids[0]); i++) {
         if (WellKnownSids[i].Type == WellKnownSidType) {
             DWORD length = GetSidLengthRequired(WellKnownSids[i].Sid.SubAuthorityCount);
 
             if (*cbSid < length)
             {
                 *cbSid = length;
                 SetLastError(ERROR_INSUFFICIENT_BUFFER);
                 return FALSE;
             }
             if (!pSid)
             {
                 SetLastError(ERROR_INVALID_PARAMETER);
                 return FALSE;
             }
             CopyMemory(pSid, &WellKnownSids[i].Sid.Revision, length);
             *cbSid = length;
             return TRUE;
         }
     }
 
     if (DomainSid == NULL || *GetSidSubAuthorityCount(DomainSid) == SID_MAX_SUB_AUTHORITIES)
     {
         SetLastError(ERROR_INVALID_PARAMETER);
         return FALSE;
     }
 
     for (i = 0; i < sizeof(WellKnownRids)/sizeof(WellKnownRids[0]); i++)
         if (WellKnownRids[i].Type == WellKnownSidType) {
             UCHAR domain_subauth = *GetSidSubAuthorityCount(DomainSid);
             DWORD domain_sid_length = GetSidLengthRequired(domain_subauth);
             DWORD output_sid_length = GetSidLengthRequired(domain_subauth + 1);
 
             if (*cbSid < output_sid_length)
             {
                 *cbSid = output_sid_length;
                 SetLastError(ERROR_INSUFFICIENT_BUFFER);
                 return FALSE;
             }
             if (!pSid)
             {
                 SetLastError(ERROR_INVALID_PARAMETER);
                 return FALSE;
             }
             CopyMemory(pSid, DomainSid, domain_sid_length);
             (*GetSidSubAuthorityCount(pSid))++;
             (*GetSidSubAuthority(pSid, domain_subauth)) = WellKnownRids[i].Rid;
             *cbSid = output_sid_length;
             return TRUE;
         }
 
     SetLastError(ERROR_INVALID_PARAMETER);
     return FALSE;
 }

Referenced by create_unknownsid(), CreateWindowStationAndDesktops(), get_sd(), test_SystemSecurity(), and well_known_sid().

◆ debugstr_sid()

static const char* debugstr_sid ( PSID sid )

static

Definition at line 176 of file security.c.

 {
     int auth = 0;
     SID * psid = (SID *)sid;
 
     if (psid == NULL)
         return "(null)";
 
     auth = psid->IdentifierAuthority.Value[5] +
            (psid->IdentifierAuthority.Value[4] << 8) +
            (psid->IdentifierAuthority.Value[3] << 16) +
            (psid->IdentifierAuthority.Value[2] << 24);
 
     switch (psid->SubAuthorityCount) {
     case 0:
         return wine_dbg_sprintf("S-%d-%d", psid->Revision, auth);
     case 1:
         return wine_dbg_sprintf("S-%d-%d-%lu", psid->Revision, auth,
             psid->SubAuthority[0]);
     case 2:
         return wine_dbg_sprintf("S-%d-%d-%lu-%lu", psid->Revision, auth,
             psid->SubAuthority[0], psid->SubAuthority[1]);
     case 3:
         return wine_dbg_sprintf("S-%d-%d-%lu-%lu-%lu", psid->Revision, auth,
             psid->SubAuthority[0], psid->SubAuthority[1], psid->SubAuthority[2]);
     case 4:
         return wine_dbg_sprintf("S-%d-%d-%lu-%lu-%lu-%lu", psid->Revision, auth,
             psid->SubAuthority[0], psid->SubAuthority[1], psid->SubAuthority[2],
             psid->SubAuthority[3]);
     case 5:
         return wine_dbg_sprintf("S-%d-%d-%lu-%lu-%lu-%lu-%lu", psid->Revision, auth,
             psid->SubAuthority[0], psid->SubAuthority[1], psid->SubAuthority[2],
             psid->SubAuthority[3], psid->SubAuthority[4]);
     case 6:
         return wine_dbg_sprintf("S-%d-%d-%lu-%lu-%lu-%lu-%lu-%lu", psid->Revision, auth,
             psid->SubAuthority[3], psid->SubAuthority[1], psid->SubAuthority[2],
             psid->SubAuthority[0], psid->SubAuthority[4], psid->SubAuthority[5]);
     case 7:
         return wine_dbg_sprintf("S-%d-%d-%lu-%lu-%lu-%lu-%lu-%lu-%lu", psid->Revision, auth,
             psid->SubAuthority[0], psid->SubAuthority[1], psid->SubAuthority[2],
             psid->SubAuthority[3], psid->SubAuthority[4], psid->SubAuthority[5],
             psid->SubAuthority[6]);
     case 8:
         return wine_dbg_sprintf("S-%d-%d-%lu-%lu-%lu-%lu-%lu-%lu-%lu-%lu", psid->Revision, auth,
             psid->SubAuthority[0], psid->SubAuthority[1], psid->SubAuthority[2],
             psid->SubAuthority[3], psid->SubAuthority[4], psid->SubAuthority[5],
             psid->SubAuthority[6], psid->SubAuthority[7]);
     }
     return "(too-big)";
 }

Referenced by CreateWellKnownSid(), and IsWellKnownSid().

◆ DeleteAce()

BOOL WINAPI DeleteAce	(	PACL	pAcl,
		DWORD	dwAceIndex
	)

Definition at line 1045 of file security.c.

 {
     return set_ntstatus(RtlDeleteAce(pAcl, dwAceIndex));
 }

◆ DumpAce()

static BOOL DumpAce	(	LPVOID	pace,
		WCHAR **	pwptr,
		ULONG *	plen
	)

static

Definition at line 2936 of file security.c.

 {
     ACCESS_ALLOWED_ACE *piace; /* all the supported ACEs have the same memory layout */
     static const WCHAR openbr = '(';
     static const WCHAR closebr = ')';
     static const WCHAR semicolon = ';';
 
     if (((PACE_HEADER)pace)->AceType > SYSTEM_ALARM_ACE_TYPE || ((PACE_HEADER)pace)->AceSize < sizeof(ACCESS_ALLOWED_ACE))
     {
         SetLastError(ERROR_INVALID_ACL);
         return FALSE;
     }
 
     piace = pace;
     DumpString(&openbr, 1, pwptr, plen);
     switch (piace->Header.AceType)
     {
         case ACCESS_ALLOWED_ACE_TYPE:
             DumpString(SDDL_ACCESS_ALLOWED, -1, pwptr, plen);
             break;
         case ACCESS_DENIED_ACE_TYPE:
             DumpString(SDDL_ACCESS_DENIED, -1, pwptr, plen);
             break;
         case SYSTEM_AUDIT_ACE_TYPE:
             DumpString(SDDL_AUDIT, -1, pwptr, plen);
             break;
         case SYSTEM_ALARM_ACE_TYPE:
             DumpString(SDDL_ALARM, -1, pwptr, plen);
             break;
     }
     DumpString(&semicolon, 1, pwptr, plen);
 
     if (piace->Header.AceFlags & OBJECT_INHERIT_ACE)
         DumpString(SDDL_OBJECT_INHERIT, -1, pwptr, plen);
     if (piace->Header.AceFlags & CONTAINER_INHERIT_ACE)
         DumpString(SDDL_CONTAINER_INHERIT, -1, pwptr, plen);
     if (piace->Header.AceFlags & NO_PROPAGATE_INHERIT_ACE)
         DumpString(SDDL_NO_PROPAGATE, -1, pwptr, plen);
     if (piace->Header.AceFlags & INHERIT_ONLY_ACE)
         DumpString(SDDL_INHERIT_ONLY, -1, pwptr, plen);
     if (piace->Header.AceFlags & INHERITED_ACE)
         DumpString(SDDL_INHERITED, -1, pwptr, plen);
     if (piace->Header.AceFlags & SUCCESSFUL_ACCESS_ACE_FLAG)
         DumpString(SDDL_AUDIT_SUCCESS, -1, pwptr, plen);
     if (piace->Header.AceFlags & FAILED_ACCESS_ACE_FLAG)
         DumpString(SDDL_AUDIT_FAILURE, -1, pwptr, plen);
     DumpString(&semicolon, 1, pwptr, plen);
     DumpRights(piace->Mask, pwptr, plen);
     DumpString(&semicolon, 1, pwptr, plen);
     /* objects not supported */
     DumpString(&semicolon, 1, pwptr, plen);
     /* objects not supported */
     DumpString(&semicolon, 1, pwptr, plen);
     if (!DumpSid((PSID)&piace->SidStart, pwptr, plen))
         return FALSE;
     DumpString(&closebr, 1, pwptr, plen);
     return TRUE;
 }

Referenced by DumpAcl().

◆ DumpAcl()

static BOOL DumpAcl	(	PACL	pacl,
		WCHAR **	pwptr,
		ULONG *	plen,
		BOOL	protected,
		BOOL	autoInheritReq,
		BOOL	autoInherited
	)

static

Definition at line 2995 of file security.c.

 {
     WORD count;
     int i;
 
     if (protected)
         DumpString(SDDL_PROTECTED, -1, pwptr, plen);
     if (autoInheritReq)
         DumpString(SDDL_AUTO_INHERIT_REQ, -1, pwptr, plen);
     if (autoInherited)
         DumpString(SDDL_AUTO_INHERITED, -1, pwptr, plen);
 
     if (pacl == NULL)
         return TRUE;
 
     if (!IsValidAcl(pacl))
         return FALSE;
 
     count = pacl->AceCount;
     for (i = 0; i < count; i++)
     {
         LPVOID ace;
         if (!GetAce(pacl, i, &ace))
             return FALSE;
         if (!DumpAce(ace, pwptr, plen))
             return FALSE;
     }
 
     return TRUE;
 }

Referenced by DumpDacl(), and DumpSacl().

◆ DumpDacl()

static BOOL DumpDacl	(	PSECURITY_DESCRIPTOR	SecurityDescriptor,
		WCHAR **	pwptr,
		ULONG *	plen
	)

static

Definition at line 3062 of file security.c.

 {
     static const WCHAR dacl[] = {'D',':',0};
     SECURITY_DESCRIPTOR_CONTROL control;
     BOOL present, defaulted;
     DWORD revision;
     PACL pacl;
 
     if (!GetSecurityDescriptorDacl(SecurityDescriptor, &present, &pacl, &defaulted))
         return FALSE;
 
     if (!GetSecurityDescriptorControl(SecurityDescriptor, &control, &revision))
         return FALSE;
 
     if (!present)
         return TRUE;
 
     DumpString(dacl, 2, pwptr, plen);
     if (!DumpAcl(pacl, pwptr, plen, control & SE_DACL_PROTECTED, control & SE_DACL_AUTO_INHERIT_REQ, control & SE_DACL_AUTO_INHERITED))
         return FALSE;
     return TRUE;
 }

Referenced by ConvertSecurityDescriptorToStringSecurityDescriptorW().

◆ DumpGroup()

static BOOL DumpGroup	(	PSECURITY_DESCRIPTOR	SecurityDescriptor,
		WCHAR **	pwptr,
		ULONG *	plen
	)

static

Definition at line 3044 of file security.c.

 {
     static const WCHAR prefix[] = {'G',':',0};
     BOOL bDefaulted;
     PSID psid;
 
     if (!GetSecurityDescriptorGroup(SecurityDescriptor, &psid, &bDefaulted))
         return FALSE;
 
     if (psid == NULL)
         return TRUE;
 
     DumpString(prefix, -1, pwptr, plen);
     if (!DumpSid(psid, pwptr, plen))
         return FALSE;
     return TRUE;
 }

Referenced by ConvertSecurityDescriptorToStringSecurityDescriptorW().

◆ DumpOwner()

static BOOL DumpOwner	(	PSECURITY_DESCRIPTOR	SecurityDescriptor,
		WCHAR **	pwptr,
		ULONG *	plen
	)

static

Definition at line 3026 of file security.c.

 {
     static const WCHAR prefix[] = {'O',':',0};
     BOOL bDefaulted;
     PSID psid;
 
     if (!GetSecurityDescriptorOwner(SecurityDescriptor, &psid, &bDefaulted))
         return FALSE;
 
     if (psid == NULL)
         return TRUE;
 
     DumpString(prefix, -1, pwptr, plen);
     if (!DumpSid(psid, pwptr, plen))
         return FALSE;
     return TRUE;
 }

Referenced by ConvertSecurityDescriptorToStringSecurityDescriptorW().

◆ DumpRights()

static void DumpRights	(	DWORD	mask,
		WCHAR **	pwptr,
		ULONG *	plen
	)

static

Definition at line 2897 of file security.c.

 {
     static const WCHAR fmtW[] = {'0','x','%','x',0};
     WCHAR buf[15];
     size_t i;
 
     if (mask == 0)
         return;
 
     /* first check if the right have name */
     for (i = 0; i < sizeof(AceRights)/sizeof(AceRights[0]); i++)
     {
         if (AceRights[i].wstr == NULL)
             break;
         if (mask == AceRights[i].value)
         {
             DumpString(AceRights[i].wstr, -1, pwptr, plen);
             return;
         }
     }
 
     /* then check if it can be built from bit names */
     for (i = 0; i < 32; i++)
     {
         if ((mask & (1 << i)) && (AceRightBitNames[i] == NULL))
         {
             /* can't be built from bit names */
             sprintfW(buf, fmtW, mask);
             DumpString(buf, -1, pwptr, plen);
             return;
         }
     }
 
     /* build from bit names */
     for (i = 0; i < 32; i++)
         if (mask & (1 << i))
             DumpString(AceRightBitNames[i], -1, pwptr, plen);
 }

Referenced by DumpAce().

◆ DumpSacl()

static BOOL DumpSacl	(	PSECURITY_DESCRIPTOR	SecurityDescriptor,
		WCHAR **	pwptr,
		ULONG *	plen
	)

static

Definition at line 3085 of file security.c.

 {
     static const WCHAR sacl[] = {'S',':',0};
     SECURITY_DESCRIPTOR_CONTROL control;
     BOOL present, defaulted;
     DWORD revision;
     PACL pacl;
 
     if (!GetSecurityDescriptorSacl(SecurityDescriptor, &present, &pacl, &defaulted))
         return FALSE;
 
     if (!GetSecurityDescriptorControl(SecurityDescriptor, &control, &revision))
         return FALSE;
 
     if (!present)
         return TRUE;
 
     DumpString(sacl, 2, pwptr, plen);
     if (!DumpAcl(pacl, pwptr, plen, control & SE_SACL_PROTECTED, control & SE_SACL_AUTO_INHERIT_REQ, control & SE_SACL_AUTO_INHERITED))
         return FALSE;
     return TRUE;
 }

Referenced by ConvertSecurityDescriptorToStringSecurityDescriptorW().

◆ DumpSid()

static BOOL DumpSid	(	PSID	psid,
		WCHAR **	pwptr,
		ULONG *	plen
	)

static

Definition at line 2847 of file security.c.

 {
     size_t i;
     for (i = 0; i < sizeof(WellKnownSids) / sizeof(WellKnownSids[0]); i++)
     {
         if (WellKnownSids[i].wstr[0] && EqualSid(psid, (PSID)&(WellKnownSids[i].Sid.Revision)))
         {
             DumpString(WellKnownSids[i].wstr, 2, pwptr, plen);
             return TRUE;
         }
     }
 
     return DumpSidNumeric(psid, pwptr, plen);
 }

Referenced by DumpAce(), DumpGroup(), and DumpOwner().

◆ DumpSidNumeric()

static BOOL DumpSidNumeric	(	PSID	psid,
		WCHAR **	pwptr,
		ULONG *	plen
	)

static

Definition at line 2808 of file security.c.

 {
     DWORD i;
     WCHAR fmt[] = { 'S','-','%','u','-','%','d',0 };
     WCHAR subauthfmt[] = { '-','%','u',0 };
     WCHAR buf[26];
     SID *pisid = psid;
 
     if( !IsValidSid( psid ) || pisid->Revision != SDDL_REVISION)
     {
         SetLastError(ERROR_INVALID_SID);
         return FALSE;
     }
 
     if (pisid->IdentifierAuthority.Value[0] ||
      pisid->IdentifierAuthority.Value[1])
     {
         FIXME("not matching MS' bugs\n");
         SetLastError(ERROR_INVALID_SID);
         return FALSE;
     }
 
     sprintfW( buf, fmt, pisid->Revision,
         MAKELONG(
             MAKEWORD( pisid->IdentifierAuthority.Value[5],
                     pisid->IdentifierAuthority.Value[4] ),
             MAKEWORD( pisid->IdentifierAuthority.Value[3],
                     pisid->IdentifierAuthority.Value[2] )
         ) );
     DumpString(buf, -1, pwptr, plen);
 
     for( i=0; i<pisid->SubAuthorityCount; i++ )
     {
         sprintfW( buf, subauthfmt, pisid->SubAuthority[i] );
         DumpString(buf, -1, pwptr, plen);
     }
     return TRUE;
 }

Referenced by DumpSid().

◆ DumpString()

static void DumpString	(	LPCWSTR	string,
		int	cch,
		WCHAR **	pwptr,
		ULONG *	plen
	)

static

Definition at line 2793 of file security.c.

 {
     if (cch == -1)
         cch = strlenW(string);
 
     if (plen)
         *plen += cch;
 
     if (pwptr)
     {
         memcpy(*pwptr, string, sizeof(WCHAR)*cch);
         *pwptr += cch;
     }
 }

Referenced by DumpAce(), DumpAcl(), DumpDacl(), DumpGroup(), DumpOwner(), DumpRights(), DumpSacl(), DumpSid(), and DumpSidNumeric().

◆ DuplicateToken()

BOOL WINAPI DuplicateToken	(	IN HANDLE	ExistingTokenHandle,
		IN SECURITY_IMPERSONATION_LEVEL	ImpersonationLevel,
		OUT PHANDLE	DuplicateTokenHandle
	)

Definition at line 3454 of file security.c.

 {
     return DuplicateTokenEx(ExistingTokenHandle,
                             TOKEN_IMPERSONATE | TOKEN_QUERY,
                             NULL,
                             ImpersonationLevel,
                             TokenImpersonation,
                             DuplicateTokenHandle);
 }

Referenced by test_AccessCheck(), test_CheckTokenMembership(), test_impersonation_level(), test_kernel_objects_security(), and test_token_attr().

◆ DuplicateTokenEx()

BOOL WINAPI DuplicateTokenEx	(	IN HANDLE	ExistingTokenHandle,
		IN DWORD	dwDesiredAccess,
		IN LPSECURITY_ATTRIBUTES lpTokenAttributes	OPTIONAL,
		IN SECURITY_IMPERSONATION_LEVEL	ImpersonationLevel,
		IN TOKEN_TYPE	TokenType,
		OUT PHANDLE	DuplicateTokenHandle
	)

Definition at line 3394 of file security.c.

 {
     OBJECT_ATTRIBUTES ObjectAttributes;
     NTSTATUS Status;
     SECURITY_QUALITY_OF_SERVICE Sqos;
 
     TRACE("%p 0x%08x 0x%08x 0x%08x %p\n", ExistingTokenHandle, dwDesiredAccess,
         ImpersonationLevel, TokenType, DuplicateTokenHandle);
 
     Sqos.Length = sizeof(SECURITY_QUALITY_OF_SERVICE);
     Sqos.ImpersonationLevel = ImpersonationLevel;
     Sqos.ContextTrackingMode = 0;
     Sqos.EffectiveOnly = FALSE;
 
     if (lpTokenAttributes != NULL)
     {
         InitializeObjectAttributes(&ObjectAttributes,
                                    NULL,
                                    lpTokenAttributes->bInheritHandle ? OBJ_INHERIT : 0,
                                    NULL,
                                    lpTokenAttributes->lpSecurityDescriptor);
     }
     else
     {
         InitializeObjectAttributes(&ObjectAttributes,
                                    NULL,
                                    0,
                                    NULL,
                                    NULL);
     }
 
     ObjectAttributes.SecurityQualityOfService = &Sqos;
 
     Status = NtDuplicateToken(ExistingTokenHandle,
                               dwDesiredAccess,
                               &ObjectAttributes,
                               FALSE,
                               TokenType,
                               DuplicateTokenHandle);
     if (!NT_SUCCESS(Status))
     {
         ERR("NtDuplicateToken failed: Status %08x\n", Status);
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     TRACE("Returning token %p.\n", *DuplicateTokenHandle);
 
     return TRUE;
 }

Referenced by CheckTokenMembership(), CreateRestrictedToken(), DuplicateToken(), LaunchProcess(), START_TEST(), test_CreateRestrictedToken(), test_token_security_descriptor(), and WlxStartApplication().

◆ EqualDomainSid()

BOOL WINAPI EqualDomainSid	(	IN PSID	pSid1,
		IN PSID	pSid2,
		OUT BOOL *	pfEqual
	)

Definition at line 3719 of file security.c.

 {
     UNIMPLEMENTED;
     return FALSE;
 }

◆ EqualPrefixSid()

BOOL WINAPI EqualPrefixSid	(	PSID	pSid1,
		PSID	pSid2
	)

Definition at line 720 of file security.c.

 {
     return RtlEqualPrefixSid (pSid1, pSid2);
 }

Referenced by test_process_security().

◆ EqualSid()

BOOL WINAPI EqualSid	(	PSID	pSid1,
		PSID	pSid2
	)

Definition at line 708 of file security.c.

 {
     SetLastError(ERROR_SUCCESS);
     return RtlEqualSid (pSid1, pSid2);
 }

Referenced by _test_group(), CachedGetUserFromSid(), check_wellknown_name(), CheckForGuestsAndAdmins(), DequeueSidLookup(), DumpSid(), FindSidInCache(), FindSidInPrincipalsListAddAce(), GetEventUserName(), is_token_admin(), IsNTAdmin(), IsWellKnownSid(), LsapSetTokenOwner(), map_nfs4ace_who(), PrintSid(), QueueSidLookup(), RunningAsSYSTEM(), test_AddMandatoryAce(), test_child_token_sd(), test_child_token_sd_medium(), test_child_token_sd_restricted(), test_CreateRestrictedToken(), test_default_dacl_owner_sid(), test_EqualSid(), test_GetExplicitEntriesFromAclW(), test_GetNamedSecurityInfoA(), test_GetSecurityInfo(), test_GetWindowsAccountDomainSid(), test_group_equal(), test_inherited_dacl(), test_owner_equal(), test_SystemSecurity(), test_token_label(), test_token_security_descriptor(), test_TokenIntegrityLevel(), and UpdatePrincipalInfo().

◆ FindFirstFreeAce()

BOOL WINAPI FindFirstFreeAce	(	PACL	pAcl,
		LPVOID *	pAce
	)

Definition at line 1055 of file security.c.

 {
     return RtlFirstFreeAce(pAcl,
                            (PACE*)pAce);
 }

◆ FreeSid()

PVOID WINAPI FreeSid ( PSID pSid )

Definition at line 577 of file security.c.

 {
     return RtlFreeSid(pSid);
 }

Referenced by check_wellknown_name(), CheckForGuestsAndAdmins(), CreateDefaultSecurityDescriptor(), GetShellSecurityDescriptor(), is_process_limited(), is_token_admin(), IsNTAdmin(), IsUserAdmin(), PerfDataUninitialize(), pSetupIsUserAdmin(), SHTestTokenMembership(), test_AccessCheck(), test_AddMandatoryAce(), test_CreateWellKnownSid(), test_EqualSid(), test_GetExplicitEntriesFromAclW(), test_GetNamedSecurityInfoA(), test_GetSecurityInfo(), test_LookupAccountSid(), test_LsaLookupSids(), test_process_security(), test_reg_create_key(), test_reg_open_key(), test_SetEntriesInAclA(), test_SetEntriesInAclW(), test_sid(), and test_trustee().

◆ GetAce()

BOOL WINAPI GetAce	(	PACL	pAcl,
		DWORD	dwAceIndex,
		LPVOID *	pAce
	)

Definition at line 1065 of file security.c.

 {
     return set_ntstatus(RtlGetAce(pAcl, dwAceIndex, pAce));
 }

Referenced by AccRewriteGetExplicitEntriesFromAcl(), AccRewriteSetEntriesInAcl(), DumpAcl(), CSecurityDescriptor::GetDACLEntry(), CSecurityDescriptor::GetSACLEntry(), map_dacl_2_nfs4acl(), PrintFileDacl(), ReloadPrincipalsList(), and test_GetShellSecurityDescriptor().

◆ GetAclInformation()

BOOL WINAPI GetAclInformation	(	PACL	pAcl,
		LPVOID	pAclInformation,
		DWORD	nAclInformationLength,
		ACL_INFORMATION_CLASS	dwAclInformationClass
	)

Definition at line 1073 of file security.c.

 {
     return set_ntstatus(RtlQueryInformationAcl(pAcl, pAclInformation,
                                                nAclInformationLength, dwAclInformationClass));
 }

Referenced by AccRewriteSetEntriesInAcl(), CSecurityDescriptor::GetDACLEntriesCount(), CSecurityDescriptor::GetSACLEntriesCount(), and test_GetShellSecurityDescriptor().

◆ GetFileSecurityA()

BOOL WINAPI GetFileSecurityA	(	LPCSTR	lpFileName,
		SECURITY_INFORMATION	RequestedInformation,
		PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		DWORD	nLength,
		LPDWORD	lpnLengthNeeded
	)

Definition at line 1252 of file security.c.

 {
     UNICODE_STRING FileName;
     BOOL bResult;
 
     if (!RtlCreateUnicodeStringFromAsciiz(&FileName, lpFileName))
     {
         SetLastError(ERROR_NOT_ENOUGH_MEMORY);
         return FALSE;
     }
 
     bResult = GetFileSecurityW(FileName.Buffer,
                                RequestedInformation,
                                pSecurityDescriptor,
                                nLength,
                                lpnLengthNeeded);
 
     RtlFreeUnicodeString(&FileName);
 
     return bResult;
 }

Referenced by test_FileSecurity().

◆ GetFileSecurityW()

BOOL WINAPI GetFileSecurityW	(	LPCWSTR	lpFileName,
		SECURITY_INFORMATION	RequestedInformation,
		PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		DWORD	nLength,
		LPDWORD	lpnLengthNeeded
	)

Definition at line 1283 of file security.c.

 {
     OBJECT_ATTRIBUTES ObjectAttributes;
     IO_STATUS_BLOCK StatusBlock;
     UNICODE_STRING FileName;
     ULONG AccessMask = 0;
     HANDLE FileHandle;
     NTSTATUS Status;
 
     TRACE("GetFileSecurityW() called\n");
 
     QuerySecurityAccessMask(RequestedInformation, &AccessMask);
 
     if (!RtlDosPathNameToNtPathName_U(lpFileName,
                                       &FileName,
                                       NULL,
                                       NULL))
     {
         ERR("Invalid path\n");
         SetLastError(ERROR_INVALID_NAME);
         return FALSE;
     }
 
     InitializeObjectAttributes(&ObjectAttributes,
                                &FileName,
                                OBJ_CASE_INSENSITIVE,
                                NULL,
                                NULL);
 
     Status = NtOpenFile(&FileHandle,
                         AccessMask,
                         &ObjectAttributes,
                         &StatusBlock,
                         FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE,
                         0);
 
     RtlFreeHeap(RtlGetProcessHeap(),
                 0,
                 FileName.Buffer);
 
     if (!NT_SUCCESS(Status))
     {
         ERR("NtOpenFile() failed (Status %lx)\n", Status);
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     Status = NtQuerySecurityObject(FileHandle,
                                    RequestedInformation,
                                    pSecurityDescriptor,
                                    nLength,
                                    lpnLengthNeeded);
     NtClose(FileHandle);
     if (!NT_SUCCESS(Status))
     {
         ERR("NtQuerySecurityObject() failed (Status %lx)\n", Status);
         SetLastError(RtlNtStatusToDosError(Status));
         return FALSE;
     }
 
     return TRUE;
 }

Referenced by GetFileSecurityA(), and RetreiveFileSecurity().

◆ GetKernelObjectSecurity()

BOOL WINAPI GetKernelObjectSecurity	(	HANDLE	Handle,
		SECURITY_INFORMATION	RequestedInformation,
		PSECURITY_DESCRIPTOR	pSecurityDescriptor,
		DWORD	nLength,
		LPDWORD	lpnLengthNeeded
	)

Definition at line 866 of file security.c.

 {
     TRACE("(%p,0x%08x,%p,0x%08x,%p)\n", Handle, RequestedInformation,
           pSecurityDescriptor, nLength, lpnLengthNeeded);
 
     return set_ntstatus( NtQuerySecurityObject(Handle, RequestedInformation, pSecurityDescriptor,
                                                nLength, lpnLengthNeeded ));
 }

Referenced by test_AddMandatoryAce(), test_child_token_sd(), test_child_token_sd_medium(), test_child_token_sd_restricted(), test_default_dacl_owner_sid(), test_get_security_descriptor(), test_token_label(), and test_token_security_descriptor().

◆ GetLengthSid()

DWORD WINAPI GetLengthSid ( PSID pSid )

Definition at line 798 of file security.c.

 {
     return (DWORD)RtlLengthSid(pSid);
 }

Referenced by AccpCalcNeededAceSize(), AccpLookupCurrentUser(), AccpLookupSidByName(), AccRewriteGetExplicitEntriesFromAcl(), AddAceToDesktop(), AddAceToWindowStation(), AddPrincipalToList(), AllowWinstaAccess(), AuthzGetInformationFromContext(), AuthzInitializeContextFromSid(), AuthzpQueryToken(), BuildDefaultPrincipalAce(), CachedGetUserFromSid(), CacheLookupResults(), CreateDefaultSecurityDescriptor(), CreateUserProfileExW(), CreateWindowStationAndDesktops(), fill_sid(), GetShellSecurityDescriptor(), GetUserSid(), LsarpCreateAccount(), QueueSidLookup(), ReloadPrincipalsList(), and test_LookupAccountName().

◆ GetNamedSecurityInfoA()

DWORD WINAPI GetNamedSecurityInfoA	(	LPSTR	pObjectName,
		SE_OBJECT_TYPE	ObjectType,
		SECURITY_INFORMATION	SecurityInfo,
		PSID *	ppsidOwner,
		PSID *	ppsidGroup,
		PACL *	ppDacl,
		PACL *	ppSacl,
		PSECURITY_DESCRIPTOR *	ppSecurityDescriptor
	)

Definition at line 3637 of file security.c.

 {
     DWORD len;
     LPWSTR wstr = NULL;
     DWORD r;
 
     TRACE("%s %d %d %p %p %p %p %p\n", pObjectName, ObjectType, SecurityInfo,
         ppsidOwner, ppsidGroup, ppDacl, ppSacl, ppSecurityDescriptor);
 
     if( pObjectName )
     {
         len = MultiByteToWideChar( CP_ACP, 0, pObjectName, -1, NULL, 0 );
         wstr = HeapAlloc( GetProcessHeap(), 0, len*sizeof(WCHAR));
         MultiByteToWideChar( CP_ACP, 0, pObjectName, -1, wstr, len );
     }
 
     r = GetNamedSecurityInfoW( wstr, ObjectType, SecurityInfo, ppsidOwner,
                            ppsidGroup, ppDacl, ppSacl, ppSecurityDescriptor );
 
     HeapFree( GetProcessHeap(), 0, wstr );
 
     return r;
 }

◆ GetSecurityInfoExA()

DWORD WINAPI GetSecurityInfoExA	(	HANDLE	hObject,
		SE_OBJECT_TYPE	ObjectType,
		SECURITY_INFORMATION	SecurityInfo,
		LPCSTR	lpProvider,
		LPCSTR	lpProperty,
		PACTRL_ACCESSA *	ppAccessList,
		PACTRL_AUDITA *	ppAuditList,
		LPSTR *	lppOwner,
		LPSTR *	lppGroup
	)

Definition at line 1768 of file security.c.

 {
     FIXME("%s() not implemented!\n", __FUNCTION__);
     return ERROR_BAD_PROVIDER;
 }

◆ GetSecurityInfoExW()

DWORD WINAPI GetSecurityInfoExW	(	HANDLE	hObject,
		SE_OBJECT_TYPE	ObjectType,
		SECURITY_INFORMATION	SecurityInfo,
		LPCWSTR	lpProvider,
		LPCWSTR	lpProperty,
		PACTRL_ACCESSW *	ppAccessList,
		PACTRL_AUDITW *	ppAuditList,
		LPWSTR *	lppOwner,
		LPWSTR *	lppGroup
	)

Definition at line 1788 of file security.c.

 {
     FIXME("%s() not implemented!\n", __FUNCTION__);
     return ERROR_BAD_PROVIDER;
 }

◆ GetSidIdentifierAuthority()

PSID_IDENTIFIER_AUTHORITY WINAPI GetSidIdentifierAuthority ( PSID pSid )

Definition at line 764 of file security.c.

 {
     SetLastError(ERROR_SUCCESS);
     return RtlIdentifierAuthoritySid(pSid);
 }

Classes

Macros

Typedefs

Functions

Variables

Macro Definition Documentation

◆ ADS_RIGHT_ACTRL_DS_LIST

◆ ADS_RIGHT_DS_CONTROL_ACCESS

◆ ADS_RIGHT_DS_CREATE_CHILD

◆ ADS_RIGHT_DS_DELETE_CHILD

◆ ADS_RIGHT_DS_DELETE_TREE

◆ ADS_RIGHT_DS_LIST_OBJECT

◆ ADS_RIGHT_DS_READ_PROP

◆ ADS_RIGHT_DS_SELF

◆ ADS_RIGHT_DS_WRITE_PROP

Typedef Documentation

◆ ACEFLAG

◆ LPACEFLAG

◆ MAX_SID

◆ WELLKNOWNRID

◆ WELLKNOWNSID

Function Documentation

◆ AccessCheck()

◆ AccessCheckByType()

◆ AddAccessAllowedAce()

◆ AddAccessAllowedAceEx()

◆ AddAccessDeniedAce()

◆ AddAccessDeniedAceEx()

◆ AddAce()

◆ AddAuditAccessAce()

◆ AddAuditAccessAceEx()

◆ AdjustTokenGroups()

◆ AdjustTokenPrivileges()

◆ ADVAPI_GetComputerSid()

◆ ADVAPI_IsLocalComputer()

◆ AllocateAndInitializeSid()

◆ AllocateLocallyUniqueId()

◆ AreAllAccessesGranted()

◆ AreAnyAccessesGranted()

◆ BuildExplicitAccessWithNameA()

◆ BuildExplicitAccessWithNameW()

◆ BuildTrusteeWithNameA()

◆ BuildTrusteeWithNameW()

◆ BuildTrusteeWithObjectsAndNameA()

◆ BuildTrusteeWithObjectsAndNameW()

◆ BuildTrusteeWithObjectsAndSidA()

◆ BuildTrusteeWithObjectsAndSidW()

◆ BuildTrusteeWithSidA()

◆ BuildTrusteeWithSidW()

◆ ComputeStringSidSize()

◆ ConvertSecurityDescriptorToStringSecurityDescriptorA()

◆ ConvertSecurityDescriptorToStringSecurityDescriptorW()

◆ ConvertSidToStringSidA()

◆ ConvertSidToStringSidW()

◆ ConvertStringSecurityDescriptorToSecurityDescriptorA()

◆ ConvertStringSecurityDescriptorToSecurityDescriptorW()

◆ ConvertStringSidToSidA()

◆ ConvertStringSidToSidW()

◆ CopySid()

◆ CreateProcessWithLogonW()

◆ CreateProcessWithTokenW()

◆ CreateRestrictedToken()

◆ CreateWellKnownSid()

◆ debugstr_sid()

◆ DeleteAce()

◆ DumpAce()

◆ DumpAcl()

◆ DumpDacl()

◆ DumpGroup()

◆ DumpOwner()

◆ DumpRights()

◆ DumpSacl()

◆ DumpSid()

◆ DumpSidNumeric()

◆ DumpString()

◆ DuplicateToken()

◆ DuplicateTokenEx()

◆ EqualDomainSid()

◆ EqualPrefixSid()

◆ EqualSid()