This graph shows which files directly or indirectly include this file:

Macros
#define	NO_SIZE ((ULONG)-1)

#define	CheckSid(Sid, SidSize, ExpectedSid) CheckSid_(Sid, SidSize, ExpectedSid, __FILE__, __LINE__)

#define	CheckSid_(Sid, SidSize, ExpectedSid, file, line) CheckSid__(Sid, SidSize, ExpectedSid, file ":" KMT_STRINGIZE(line))

#define	CheckAcl(Acl, AceCount, ...) CheckAcl_(Acl, AceCount, __FILE__, __LINE__, ##__VA_ARGS__)

#define	CheckAcl_(Acl, AceCount, file, line, ...) CheckAcl__(Acl, AceCount, file ":" KMT_STRINGIZE(line), ##__VA_ARGS__)

Functions
NTSTATUS	RtlxAddAuditAccessAceEx (_Inout_ PACL Acl, _In_ ULONG Revision, _In_ ULONG Flags, _In_ ACCESS_MASK AccessMask, _In_ PSID Sid, _In_ BOOLEAN Success, _In_ BOOLEAN Failure)

NTSTATUS	RtlxAddMandatoryLabelAceEx (_Inout_ PACL Acl, _In_ ULONG Revision, _In_ ULONG Flags, _In_ ACCESS_MASK AccessMask, _In_ PSID Sid)

VOID	CheckSid__ (_In_ PSID Sid, _In_ ULONG SidSize, _In_ PISID ExpectedSid, _In_ PCSTR FileAndLine)

VOID	VCheckAcl__ (_In_ PACL Acl, _In_ ULONG AceCount, _In_ PCSTR FileAndLine, _In_ va_list Arguments)

VOID	CheckAcl__ (_In_ PACL Acl, _In_ ULONG AceCount, _In_ PCSTR FileAndLine,...)

Macro Definition Documentation

◆ CheckAcl

#define CheckAcl	(	Acl,
		AceCount,
		...
	)	CheckAcl_(Acl, AceCount, __FILE__, __LINE__, ##__VA_ARGS__)

Definition at line 47 of file se.h.

◆ CheckAcl_

#define CheckAcl_	(	Acl,
		AceCount,
		file,
		line,
		...
	)	CheckAcl__(Acl, AceCount, file ":" KMT_STRINGIZE(line), ##__VA_ARGS__)

Definition at line 48 of file se.h.

◆ CheckSid

#define CheckSid	(	Sid,
		SidSize,
		ExpectedSid
	)	CheckSid_(Sid, SidSize, ExpectedSid, __FILE__, __LINE__)

Definition at line 31 of file se.h.

◆ CheckSid_

#define CheckSid_	(	Sid,
		SidSize,
		ExpectedSid,
		file,
		line
	)	CheckSid__(Sid, SidSize, ExpectedSid, file ":" KMT_STRINGIZE(line))

Definition at line 32 of file se.h.

◆ NO_SIZE

#define NO_SIZE ((ULONG)-1)

Definition at line 29 of file se.h.

Function Documentation

◆ CheckAcl__()

VOID CheckAcl__	(	_In_ PACL	Acl,
		_In_ ULONG	AceCount,
		_In_ PCSTR	FileAndLine,
			...
	)

Definition at line 219 of file SeHelpers.c.

{
    va_list Arguments;
 
    va_start(Arguments, FileAndLine);
    VCheckAcl__(Acl, AceCount, FileAndLine, Arguments);
    va_end(Arguments);
}

◆ CheckSid__()

VOID CheckSid__	(	_In_ PSID	Sid,
		_In_ ULONG	SidSize,
		_In_ PISID	ExpectedSid,
		_In_ PCSTR	FileAndLine
	)

Definition at line 89 of file SeHelpers.c.

{
    BOOLEAN Okay;
    ULONG Length;
 
    KmtOk(Sid != NULL, FileAndLine, "Sid is NULL\n");
    if (KmtSkip(Sid != NULL, FileAndLine, "No Sid\n"))
        return;
    if (KmtSkip(SidSize >= sizeof(ULONG), FileAndLine, "Sid too small: %lu\n", SidSize))
        return;
    Okay = RtlValidSid(Sid);
    KmtOk(Okay == TRUE, FileAndLine, "Invalid Sid\n");
    if (KmtSkip(Okay, FileAndLine, "Invalid Sid\n"))
        return;
 
    Length = RtlLengthSid(Sid);
    KmtOk(SidSize >= Length, FileAndLine, "SidSize %lu too small, need %lu\n", SidSize, Length);
    if (KmtSkip(SidSize >= Length, FileAndLine, "Sid too small\n"))
        return;
    Okay = RtlEqualSid(Sid, ExpectedSid);
    KmtOk(Okay, FileAndLine, "Sids %p and %p not equal\n", Sid, ExpectedSid);
    if (!Okay)
    {
        WCHAR Buffer1[128];
        WCHAR Buffer2[128];
        UNICODE_STRING SidString1, SidString2;
        RtlInitEmptyUnicodeString(&SidString1, Buffer1, sizeof(Buffer1));
        RtlInitEmptyUnicodeString(&SidString2, Buffer2, sizeof(Buffer2));
        (void)RtlConvertSidToUnicodeString(&SidString1, Sid, FALSE);
        (void)RtlConvertSidToUnicodeString(&SidString2, ExpectedSid, FALSE);
        KmtOk(0, FileAndLine, "Got %wZ, expected %wZ\n", &SidString1, &SidString2);
    }
}

Referenced by CheckDirectorySecurity__(), and VCheckAcl__().

◆ RtlxAddAuditAccessAceEx()

NTSTATUS RtlxAddAuditAccessAceEx	(	_Inout_ PACL	Acl,
		_In_ ULONG	Revision,
		_In_ ULONG	Flags,
		_In_ ACCESS_MASK	AccessMask,
		_In_ PSID	Sid,
		_In_ BOOLEAN	Success,
		_In_ BOOLEAN	Failure
	)

Definition at line 12 of file SeHelpers.c.

{
    NTSTATUS Status;
    USHORT AceSize;
    PSYSTEM_AUDIT_ACE Ace;
 
    if (Success) Flags |= SUCCESSFUL_ACCESS_ACE_FLAG;
    if (Failure) Flags |= FAILED_ACCESS_ACE_FLAG;
 
    AceSize = FIELD_OFFSET(SYSTEM_AUDIT_ACE, SidStart) + RtlLengthSid(Sid);
    Ace = ExAllocatePoolWithTag(PagedPool, AceSize, 'cAmK');
    if (!Ace)
        return STATUS_INSUFFICIENT_RESOURCES;
    Ace->Header.AceType = SYSTEM_AUDIT_ACE_TYPE;
    Ace->Header.AceFlags = Flags;
    Ace->Header.AceSize = AceSize;
    Ace->Mask = AccessMask;
    Status = RtlCopySid(AceSize - FIELD_OFFSET(SYSTEM_AUDIT_ACE, SidStart),
                        (PSID)&Ace->SidStart,
                        Sid);
    ASSERT(NT_SUCCESS(Status));
    if (NT_SUCCESS(Status))
    {
        Status = RtlAddAce(Acl,
                           Revision,
                           MAXULONG,
                           Ace,
                           AceSize);
    }
    ExFreePoolWithTag(Ace, 'cAmK');
    return Status;
}

Referenced by TestSeAssignSecurity().

◆ RtlxAddMandatoryLabelAceEx()

NTSTATUS RtlxAddMandatoryLabelAceEx	(	_Inout_ PACL	Acl,
		_In_ ULONG	Revision,
		_In_ ULONG	Flags,
		_In_ ACCESS_MASK	AccessMask,
		_In_ PSID	Sid
	)

Definition at line 53 of file SeHelpers.c.

{
    NTSTATUS Status;
    USHORT AceSize;
    PSYSTEM_MANDATORY_LABEL_ACE Ace;
 
    AceSize = FIELD_OFFSET(SYSTEM_MANDATORY_LABEL_ACE, SidStart) + RtlLengthSid(Sid);
    Ace = ExAllocatePoolWithTag(PagedPool, AceSize, 'cAmK');
    if (!Ace)
        return STATUS_INSUFFICIENT_RESOURCES;
    Ace->Header.AceType = SYSTEM_MANDATORY_LABEL_ACE_TYPE;
    Ace->Header.AceFlags = Flags;
    Ace->Header.AceSize = AceSize;
    Ace->Mask = AccessMask;
    Status = RtlCopySid(AceSize - FIELD_OFFSET(SYSTEM_MANDATORY_LABEL_ACE, SidStart),
                        (PSID)&Ace->SidStart,
                        Sid);
    ASSERT(NT_SUCCESS(Status));
    if (NT_SUCCESS(Status))
    {
        Status = RtlAddAce(Acl,
                           Revision,
                           MAXULONG,
                           Ace,
                           AceSize);
    }
    ExFreePoolWithTag(Ace, 'cAmK');
    return Status;
}