123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122 |
- /* Copyright (C) 2002-2005 RealVNC Ltd. All Rights Reserved.
- *
- * This is free software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; either version 2 of the License, or
- * (at your option) any later version.
- *
- * This software is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this software; if not, write to the Free Software
- * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307,
- * USA.
- */
-
- // Security.h
-
- // Wrapper classes for a few Windows NT security structures/functions
- // that are used by VNC
-
- #ifndef __RFB_WIN32_SECURITY_H__
- #define __RFB_WIN32_SECURITY_H__
-
- #include <stdint.h>
- #include <vector>
- #include <rfb_win32/LocalMem.h>
- #include <aclapi.h>
-
- namespace rfb {
-
- namespace win32 {
-
- struct Trustee : public TRUSTEE {
- Trustee(const char* name,
- TRUSTEE_FORM form=TRUSTEE_IS_NAME,
- TRUSTEE_TYPE type=TRUSTEE_IS_UNKNOWN);
- };
-
- struct ExplicitAccess : public EXPLICIT_ACCESS {
- ExplicitAccess(const char* name,
- TRUSTEE_FORM type,
- DWORD perms,
- ACCESS_MODE mode,
- DWORD inherit=0);
- };
-
- // Helper class for building access control lists
- struct AccessEntries {
- AccessEntries();
- ~AccessEntries();
- void allocMinEntries(int count);
- void addEntry(const char* trusteeName,
- DWORD permissions,
- ACCESS_MODE mode);
- void addEntry(const PSID sid,
- DWORD permissions,
- ACCESS_MODE mode);
-
- EXPLICIT_ACCESS* entries;
- int entry_count;
- };
-
- // Helper class for handling SIDs
- struct Sid : std::vector<uint8_t> {
- Sid() {}
- operator PSID() const {return (PSID)data();}
-
- static PSID copySID(const PSID sid);
-
- void setSID(const PSID sid);
-
- void getUserNameAndDomain(char** name, char** domain);
-
- struct Administrators;
- struct SYSTEM;
- struct FromToken;
-
- private:
- Sid(const Sid&);
- Sid& operator=(const Sid&);
- };
-
- struct Sid::Administrators : public Sid {
- Administrators();
- };
- struct Sid::SYSTEM : public Sid {
- SYSTEM();
- };
- struct Sid::FromToken : public Sid {
- FromToken(HANDLE h);
- };
-
- // Helper class for handling & freeing ACLs
- struct AccessControlList : public LocalMem {
- AccessControlList(int size) : LocalMem(size) {}
- AccessControlList(PACL acl_=0) : LocalMem(acl_) {}
- operator PACL() {return (PACL)ptr;}
- };
-
- // Create a new ACL based on supplied entries and, if supplied, existing ACL
- PACL CreateACL(const AccessEntries& ae, PACL existing_acl=0);
-
- // Helper class for memory-management of self-relative SecurityDescriptors
- struct SecurityDescriptorPtr : LocalMem {
- SecurityDescriptorPtr(int size) : LocalMem(size) {}
- SecurityDescriptorPtr(PSECURITY_DESCRIPTOR sd_=0) : LocalMem(sd_) {}
- PSECURITY_DESCRIPTOR takeSD() {return (PSECURITY_DESCRIPTOR)takePtr();}
- };
-
- // Create a new self-relative Security Descriptor, owned by SYSTEM/Administrators,
- // with the supplied DACL and no SACL. The returned value can be assigned
- // to a SecurityDescriptorPtr to be managed.
- PSECURITY_DESCRIPTOR CreateSdWithDacl(const PACL dacl);
-
- }
-
- }
-
- #endif
|