win32-security 0.3.1 → 0.3.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (23) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +0 -0
  3. data.tar.gz.sig +0 -0
  4. data/CHANGES +63 -57
  5. data/MANIFEST +11 -9
  6. data/README +53 -53
  7. data/Rakefile +58 -61
  8. data/certs/djberg96_pub.pem +21 -0
  9. data/lib/win32-security.rb +1 -0
  10. data/lib/win32/security.rb +91 -91
  11. data/lib/win32/security/ace.rb +75 -75
  12. data/lib/win32/security/acl.rb +224 -224
  13. data/lib/win32/security/sid.rb +394 -394
  14. data/lib/win32/security/windows/constants.rb +184 -184
  15. data/lib/win32/security/windows/functions.rb +116 -116
  16. data/lib/win32/security/windows/structs.rb +94 -94
  17. data/test/test_ace.rb +48 -48
  18. data/test/test_acl.rb +101 -101
  19. data/test/test_security.rb +23 -23
  20. data/test/test_sid.rb +142 -142
  21. data/win32-security.gemspec +28 -27
  22. metadata +48 -18
  23. metadata.gz.sig +0 -0
data/lib/win32/security/windows/constants.rb CHANGED
@@ -1,184 +1,184 @@
1
- module Windows
2
- module Security
3
- module Constants
4
- private
5
-
6
- TOKEN_QUERY = 8
7
- ERROR_NO_TOKEN = 1008
8
- MAXDWORD = 0xFFFFFFFF
9
-
10
- # ACL Revisions
11
-
12
- ACL_REVISION1 = 1
13
- ACL_REVISION = 2
14
- ACL_REVISION2 = 2
15
- ACL_REVISION3 = 3
16
- ACL_REVISION4 = 4
17
-
18
- # ACL Information Classes
19
-
20
- AclRevisionInformation = 1
21
- AclSizeInformation = 2
22
-
23
- # Identifier Authorities
24
-
25
- SECURITY_NULL_SID_AUTHORITY = 0
26
- SECURITY_WORLD_SID_AUTHORITY = 1
27
- SECURITY_LOCAL_SID_AUTHORITY = 2
28
- SECURITY_CREATOR_SID_AUTHORITY = 3
29
- SECURITY_NON_UNIQUE_AUTHORITY = 4
30
- SECURITY_NT_AUTHORITY = 5
31
- SECURITY_RESOURCE_MANAGER_AUTHORITY = 9
32
-
33
- # Subauthorities
34
-
35
- SECURITY_NULL_RID = 0x00000000
36
- SECURITY_WORLD_RID = 0x00000000
37
- SECURITY_LOCAL_RID = 0x00000000
38
- SECURITY_CREATOR_OWNER_RID = 0x00000000
39
- SECURITY_CREATOR_GROUP_RID = 0x00000001
40
- SECURITY_CREATOR_OWNER_SERVER_RID = 0x00000002
41
- SECURITY_CREATOR_GROUP_SERVER_RID = 0x00000003
42
- SECURITY_DIALUP_RID = 0x00000001
43
- SECURITY_NETWORK_RID = 0x00000002
44
- SECURITY_BATCH_RID = 0x00000003
45
- SECURITY_INTERACTIVE_RID = 0x00000004
46
- SECURITY_LOGON_IDS_RID = 0x00000005
47
- SECURITY_LOGON_IDS_RID_COUNT = 3
48
- SECURITY_SERVICE_RID = 0x00000006
49
- SECURITY_ANONYMOUS_LOGON_RID = 0x00000007
50
- SECURITY_PROXY_RID = 0x00000008
51
-
52
- SECURITY_ENTERPRISE_CONTROLLERS_RID = 0x00000009
53
- SECURITY_SERVER_LOGON_RID = SECURITY_ENTERPRISE_CONTROLLERS_RID
54
- SECURITY_PRINCIPAL_SELF_RID = 0x0000000A
55
- SECURITY_AUTHENTICATED_USER_RID = 0x0000000B
56
- SECURITY_RESTRICTED_CODE_RID = 0x0000000C
57
- SECURITY_TERMINAL_SERVER_RID = 0x0000000D
58
- SECURITY_REMOTE_LOGON_RID = 0x0000000E
59
- SECURITY_THIS_ORGANIZATION_RID = 0x0000000F
60
- SECURITY_LOCAL_SYSTEM_RID = 0x00000012
61
- SECURITY_LOCAL_SERVICE_RID = 0x00000013
62
- SECURITY_NETWORK_SERVICE_RID = 0x00000014
63
- SECURITY_NT_NON_UNIQUE = 0x00000015
64
- SECURITY_NT_NON_UNIQUE_SUB_AUTH_COUNT = 3
65
-
66
- SECURITY_BUILTIN_DOMAIN_RID = 0x00000020
67
- SECURITY_PACKAGE_BASE_RID = 0x00000040
68
- SECURITY_PACKAGE_RID_COUNT = 2
69
- SECURITY_PACKAGE_NTLM_RID = 0x0000000A
70
- SECURITY_PACKAGE_SCHANNEL_RID = 0x0000000E
71
- SECURITY_PACKAGE_DIGEST_RID = 0x00000015
72
- SECURITY_MAX_ALWAYS_FILTERED = 0x000003E7
73
- SECURITY_MIN_NEVER_FILTERED = 0x000003E8
74
-
75
- SECURITY_OTHER_ORGANIZATION_RID = 0x000003E8
76
- FOREST_USER_RID_MAX = 0x000001F3
77
- DOMAIN_USER_RID_ADMIN = 0x000001F4
78
- DOMAIN_USER_RID_GUEST = 0x000001F5
79
- DOMAIN_USER_RID_KRBTGT = 0x000001F6
80
- DOMAIN_USER_RID_MAX = 0x000003E7
81
- DOMAIN_GROUP_RID_ADMINS = 0x00000200
82
- DOMAIN_GROUP_RID_USERS = 0x00000201
83
- DOMAIN_GROUP_RID_GUESTS = 0x00000202
84
- DOMAIN_GROUP_RID_COMPUTERS = 0x00000203
85
- DOMAIN_GROUP_RID_CONTROLLERS = 0x00000204
86
- DOMAIN_GROUP_RID_CERT_ADMINS = 0x00000205
87
- DOMAIN_GROUP_RID_SCHEMA_ADMINS = 0x00000206
88
- DOMAIN_GROUP_RID_ENTERPRISE_ADMINS = 0x00000207
89
- DOMAIN_GROUP_RID_POLICY_ADMINS = 0x00000208
90
- DOMAIN_ALIAS_RID_ADMINS = 0x00000220
91
- DOMAIN_ALIAS_RID_USERS = 0x00000221
92
- DOMAIN_ALIAS_RID_GUESTS = 0x00000222
93
- DOMAIN_ALIAS_RID_POWER_USERS = 0x00000223
94
- DOMAIN_ALIAS_RID_ACCOUNT_OPS = 0x00000224
95
- DOMAIN_ALIAS_RID_SYSTEM_OPS = 0x00000225
96
- DOMAIN_ALIAS_RID_PRINT_OPS = 0x00000226
97
- DOMAIN_ALIAS_RID_BACKUP_OPS = 0x00000227
98
- DOMAIN_ALIAS_RID_REPLICATOR = 0x00000228
99
- DOMAIN_ALIAS_RID_RAS_SERVERS = 0x00000229
100
-
101
- DOMAIN_ALIAS_RID_PREW2KCOMPACCESS = 0x0000022A
102
- DOMAIN_ALIAS_RID_REMOTE_DESKTOP_USERS = 0x0000022B
103
- DOMAIN_ALIAS_RID_NETWORK_CONFIGURATION_OPS = 0x0000022C
104
- DOMAIN_ALIAS_RID_INCOMING_FOREST_TRUST_BUILDERS = 0x0000022D
105
- DOMAIN_ALIAS_RID_MONITORING_USERS = 0x0000022E
106
- DOMAIN_ALIAS_RID_LOGGING_USERS = 0x0000022F
107
- DOMAIN_ALIAS_RID_AUTHORIZATIONACCESS = 0x00000230
108
- DOMAIN_ALIAS_RID_TS_LICENSE_SERVERS = 0x00000231
109
- DOMAIN_ALIAS_RID_DCOM_USERS = 0x00000232
110
-
111
- # SID types
112
-
113
- SidTypeUser = 1
114
- SidTypeGroup = 2
115
- SidTypeDomain = 3
116
- SidTypeAlias = 4
117
- SidTypeWellKnownGroup = 5
118
- SidTypeDeletedAccount = 6
119
- SidTypeInvalid = 7
120
- SidTypeUnknown = 8
121
- SidTypeComputer = 9
122
-
123
- # SDDL version information
124
-
125
- SDDL_REVISION_1 = 1
126
-
127
- # ACE flags
128
-
129
- OBJECT_INHERIT_ACE = 0x1
130
- CONTAINER_INHERIT_ACE = 0x2
131
- NO_PROPAGATE_INHERIT_ACE = 0x4
132
- INHERIT_ONLY_ACE = 0x8
133
- INHERITED_ACE = 0x10
134
-
135
- # ACE Types
136
-
137
- ACCESS_MIN_MS_ACE_TYPE = 0x0
138
- ACCESS_ALLOWED_ACE_TYPE = 0x0
139
- ACCESS_DENIED_ACE_TYPE = 0x1
140
- SYSTEM_AUDIT_ACE_TYPE = 0x2
141
- SYSTEM_ALARM_ACE_TYPE = 0x3
142
- ACCESS_MAX_MS_V2_ACE_TYPE = 0x3
143
- ACCESS_ALLOWED_COMPOUND_ACE_TYPE = 0x4
144
- ACCESS_MAX_MS_V3_ACE_TYPE = 0x4
145
- ACCESS_MIN_MS_OBJECT_ACE_TYPE = 0x5
146
- ACCESS_ALLOWED_OBJECT_ACE_TYPE = 0x5
147
- ACCESS_DENIED_OBJECT_ACE_TYPE = 0x6
148
- SYSTEM_AUDIT_OBJECT_ACE_TYPE = 0x7
149
- SYSTEM_ALARM_OBJECT_ACE_TYPE = 0x8
150
- ACCESS_MAX_MS_OBJECT_ACE_TYPE = 0x8
151
- ACCESS_MAX_MS_V4_ACE_TYPE = 0x8
152
- ACCESS_MAX_MS_ACE_TYPE = 0x8
153
- ACCESS_ALLOWED_CALLBACK_ACE_TYPE = 0x9
154
- ACCESS_DENIED_CALLBACK_ACE_TYPE = 0xA
155
- ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE = 0xB
156
- ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE = 0xC
157
- SYSTEM_AUDIT_CALLBACK_ACE_TYPE = 0xD
158
- SYSTEM_ALARM_CALLBACK_ACE_TYPE = 0xE
159
- SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE = 0xF
160
- SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE = 0x10
161
- ACCESS_MAX_MS_V5_ACE_TYPE = 0x10
162
-
163
- # Standard Access Rights
164
-
165
- DELETE = 0x00010000
166
- READ_CONTROL = 0x20000
167
- WRITE_DAC = 0x40000
168
- WRITE_OWNER = 0x80000
169
- SYNCHRONIZE = 0x100000
170
- STANDARD_RIGHTS_REQUIRED = 0xf0000
171
- STANDARD_RIGHTS_READ = 0x20000
172
- STANDARD_RIGHTS_WRITE = 0x20000
173
- STANDARD_RIGHTS_EXECUTE = 0x20000
174
- STANDARD_RIGHTS_ALL = 0x1F0000
175
- SPECIFIC_RIGHTS_ALL = 0xFFFF
176
- ACCESS_SYSTEM_SECURITY = 0x1000000
177
- MAXIMUM_ALLOWED = 0x2000000
178
- GENERIC_READ = 0x80000000
179
- GENERIC_WRITE = 0x40000000
180
- GENERIC_EXECUTE = 0x20000000
181
- GENERIC_ALL = 0x10000000
182
- end
183
- end
184
- end
1
+ module Windows
2
+ module Security
3
+ module Constants
4
+ private
5
+
6
+ TOKEN_QUERY = 8
7
+ ERROR_NO_TOKEN = 1008
8
+ MAXDWORD = 0xFFFFFFFF
9
+
10
+ # ACL Revisions
11
+
12
+ ACL_REVISION1 = 1
13
+ ACL_REVISION = 2
14
+ ACL_REVISION2 = 2
15
+ ACL_REVISION3 = 3
16
+ ACL_REVISION4 = 4
17
+
18
+ # ACL Information Classes
19
+
20
+ AclRevisionInformation = 1
21
+ AclSizeInformation = 2
22
+
23
+ # Identifier Authorities
24
+
25
+ SECURITY_NULL_SID_AUTHORITY = 0
26
+ SECURITY_WORLD_SID_AUTHORITY = 1
27
+ SECURITY_LOCAL_SID_AUTHORITY = 2
28
+ SECURITY_CREATOR_SID_AUTHORITY = 3
29
+ SECURITY_NON_UNIQUE_AUTHORITY = 4
30
+ SECURITY_NT_AUTHORITY = 5
31
+ SECURITY_RESOURCE_MANAGER_AUTHORITY = 9
32
+
33
+ # Subauthorities
34
+
35
+ SECURITY_NULL_RID = 0x00000000
36
+ SECURITY_WORLD_RID = 0x00000000
37
+ SECURITY_LOCAL_RID = 0x00000000
38
+ SECURITY_CREATOR_OWNER_RID = 0x00000000
39
+ SECURITY_CREATOR_GROUP_RID = 0x00000001
40
+ SECURITY_CREATOR_OWNER_SERVER_RID = 0x00000002
41
+ SECURITY_CREATOR_GROUP_SERVER_RID = 0x00000003
42
+ SECURITY_DIALUP_RID = 0x00000001
43
+ SECURITY_NETWORK_RID = 0x00000002
44
+ SECURITY_BATCH_RID = 0x00000003
45
+ SECURITY_INTERACTIVE_RID = 0x00000004
46
+ SECURITY_LOGON_IDS_RID = 0x00000005
47
+ SECURITY_LOGON_IDS_RID_COUNT = 3
48
+ SECURITY_SERVICE_RID = 0x00000006
49
+ SECURITY_ANONYMOUS_LOGON_RID = 0x00000007
50
+ SECURITY_PROXY_RID = 0x00000008
51
+
52
+ SECURITY_ENTERPRISE_CONTROLLERS_RID = 0x00000009
53
+ SECURITY_SERVER_LOGON_RID = SECURITY_ENTERPRISE_CONTROLLERS_RID
54
+ SECURITY_PRINCIPAL_SELF_RID = 0x0000000A
55
+ SECURITY_AUTHENTICATED_USER_RID = 0x0000000B
56
+ SECURITY_RESTRICTED_CODE_RID = 0x0000000C
57
+ SECURITY_TERMINAL_SERVER_RID = 0x0000000D
58
+ SECURITY_REMOTE_LOGON_RID = 0x0000000E
59
+ SECURITY_THIS_ORGANIZATION_RID = 0x0000000F
60
+ SECURITY_LOCAL_SYSTEM_RID = 0x00000012
61
+ SECURITY_LOCAL_SERVICE_RID = 0x00000013
62
+ SECURITY_NETWORK_SERVICE_RID = 0x00000014
63
+ SECURITY_NT_NON_UNIQUE = 0x00000015
64
+ SECURITY_NT_NON_UNIQUE_SUB_AUTH_COUNT = 3
65
+
66
+ SECURITY_BUILTIN_DOMAIN_RID = 0x00000020
67
+ SECURITY_PACKAGE_BASE_RID = 0x00000040
68
+ SECURITY_PACKAGE_RID_COUNT = 2
69
+ SECURITY_PACKAGE_NTLM_RID = 0x0000000A
70
+ SECURITY_PACKAGE_SCHANNEL_RID = 0x0000000E
71
+ SECURITY_PACKAGE_DIGEST_RID = 0x00000015
72
+ SECURITY_MAX_ALWAYS_FILTERED = 0x000003E7
73
+ SECURITY_MIN_NEVER_FILTERED = 0x000003E8
74
+
75
+ SECURITY_OTHER_ORGANIZATION_RID = 0x000003E8
76
+ FOREST_USER_RID_MAX = 0x000001F3
77
+ DOMAIN_USER_RID_ADMIN = 0x000001F4
78
+ DOMAIN_USER_RID_GUEST = 0x000001F5
79
+ DOMAIN_USER_RID_KRBTGT = 0x000001F6
80
+ DOMAIN_USER_RID_MAX = 0x000003E7
81
+ DOMAIN_GROUP_RID_ADMINS = 0x00000200
82
+ DOMAIN_GROUP_RID_USERS = 0x00000201
83
+ DOMAIN_GROUP_RID_GUESTS = 0x00000202
84
+ DOMAIN_GROUP_RID_COMPUTERS = 0x00000203
85
+ DOMAIN_GROUP_RID_CONTROLLERS = 0x00000204
86
+ DOMAIN_GROUP_RID_CERT_ADMINS = 0x00000205
87
+ DOMAIN_GROUP_RID_SCHEMA_ADMINS = 0x00000206
88
+ DOMAIN_GROUP_RID_ENTERPRISE_ADMINS = 0x00000207
89
+ DOMAIN_GROUP_RID_POLICY_ADMINS = 0x00000208
90
+ DOMAIN_ALIAS_RID_ADMINS = 0x00000220
91
+ DOMAIN_ALIAS_RID_USERS = 0x00000221
92
+ DOMAIN_ALIAS_RID_GUESTS = 0x00000222
93
+ DOMAIN_ALIAS_RID_POWER_USERS = 0x00000223
94
+ DOMAIN_ALIAS_RID_ACCOUNT_OPS = 0x00000224
95
+ DOMAIN_ALIAS_RID_SYSTEM_OPS = 0x00000225
96
+ DOMAIN_ALIAS_RID_PRINT_OPS = 0x00000226
97
+ DOMAIN_ALIAS_RID_BACKUP_OPS = 0x00000227
98
+ DOMAIN_ALIAS_RID_REPLICATOR = 0x00000228
99
+ DOMAIN_ALIAS_RID_RAS_SERVERS = 0x00000229
100
+
101
+ DOMAIN_ALIAS_RID_PREW2KCOMPACCESS = 0x0000022A
102
+ DOMAIN_ALIAS_RID_REMOTE_DESKTOP_USERS = 0x0000022B
103
+ DOMAIN_ALIAS_RID_NETWORK_CONFIGURATION_OPS = 0x0000022C
104
+ DOMAIN_ALIAS_RID_INCOMING_FOREST_TRUST_BUILDERS = 0x0000022D
105
+ DOMAIN_ALIAS_RID_MONITORING_USERS = 0x0000022E
106
+ DOMAIN_ALIAS_RID_LOGGING_USERS = 0x0000022F
107
+ DOMAIN_ALIAS_RID_AUTHORIZATIONACCESS = 0x00000230
108
+ DOMAIN_ALIAS_RID_TS_LICENSE_SERVERS = 0x00000231
109
+ DOMAIN_ALIAS_RID_DCOM_USERS = 0x00000232
110
+
111
+ # SID types
112
+
113
+ SidTypeUser = 1
114
+ SidTypeGroup = 2
115
+ SidTypeDomain = 3
116
+ SidTypeAlias = 4
117
+ SidTypeWellKnownGroup = 5
118
+ SidTypeDeletedAccount = 6
119
+ SidTypeInvalid = 7
120
+ SidTypeUnknown = 8
121
+ SidTypeComputer = 9
122
+
123
+ # SDDL version information
124
+
125
+ SDDL_REVISION_1 = 1
126
+
127
+ # ACE flags
128
+
129
+ OBJECT_INHERIT_ACE = 0x1
130
+ CONTAINER_INHERIT_ACE = 0x2
131
+ NO_PROPAGATE_INHERIT_ACE = 0x4
132
+ INHERIT_ONLY_ACE = 0x8
133
+ INHERITED_ACE = 0x10
134
+
135
+ # ACE Types
136
+
137
+ ACCESS_MIN_MS_ACE_TYPE = 0x0
138
+ ACCESS_ALLOWED_ACE_TYPE = 0x0
139
+ ACCESS_DENIED_ACE_TYPE = 0x1
140
+ SYSTEM_AUDIT_ACE_TYPE = 0x2
141
+ SYSTEM_ALARM_ACE_TYPE = 0x3
142
+ ACCESS_MAX_MS_V2_ACE_TYPE = 0x3
143
+ ACCESS_ALLOWED_COMPOUND_ACE_TYPE = 0x4
144
+ ACCESS_MAX_MS_V3_ACE_TYPE = 0x4
145
+ ACCESS_MIN_MS_OBJECT_ACE_TYPE = 0x5
146
+ ACCESS_ALLOWED_OBJECT_ACE_TYPE = 0x5
147
+ ACCESS_DENIED_OBJECT_ACE_TYPE = 0x6
148
+ SYSTEM_AUDIT_OBJECT_ACE_TYPE = 0x7
149
+ SYSTEM_ALARM_OBJECT_ACE_TYPE = 0x8
150
+ ACCESS_MAX_MS_OBJECT_ACE_TYPE = 0x8
151
+ ACCESS_MAX_MS_V4_ACE_TYPE = 0x8
152
+ ACCESS_MAX_MS_ACE_TYPE = 0x8
153
+ ACCESS_ALLOWED_CALLBACK_ACE_TYPE = 0x9
154
+ ACCESS_DENIED_CALLBACK_ACE_TYPE = 0xA
155
+ ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE = 0xB
156
+ ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE = 0xC
157
+ SYSTEM_AUDIT_CALLBACK_ACE_TYPE = 0xD
158
+ SYSTEM_ALARM_CALLBACK_ACE_TYPE = 0xE
159
+ SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE = 0xF
160
+ SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE = 0x10
161
+ ACCESS_MAX_MS_V5_ACE_TYPE = 0x10
162
+
163
+ # Standard Access Rights
164
+
165
+ DELETE = 0x00010000
166
+ READ_CONTROL = 0x20000
167
+ WRITE_DAC = 0x40000
168
+ WRITE_OWNER = 0x80000
169
+ SYNCHRONIZE = 0x100000
170
+ STANDARD_RIGHTS_REQUIRED = 0xf0000
171
+ STANDARD_RIGHTS_READ = 0x20000
172
+ STANDARD_RIGHTS_WRITE = 0x20000
173
+ STANDARD_RIGHTS_EXECUTE = 0x20000
174
+ STANDARD_RIGHTS_ALL = 0x1F0000
175
+ SPECIFIC_RIGHTS_ALL = 0xFFFF
176
+ ACCESS_SYSTEM_SECURITY = 0x1000000
177
+ MAXIMUM_ALLOWED = 0x2000000
178
+ GENERIC_READ = 0x80000000
179
+ GENERIC_WRITE = 0x40000000
180
+ GENERIC_EXECUTE = 0x20000000
181
+ GENERIC_ALL = 0x10000000
182
+ end
183
+ end
184
+ end
data/lib/win32/security/windows/functions.rb CHANGED
@@ -1,116 +1,116 @@
1
- require 'ffi'
2
-
3
- module Windows
4
- module Security
5
- module Functions
6
- extend FFI::Library
7
-
8
- private
9
-
10
- # Wrapper method for attach_function + private
11
- def self.attach_pfunc(*args)
12
- attach_function(*args)
13
- private args[0]
14
- end
15
-
16
- typedef :ulong, :dword
17
- typedef :pointer, :ptr
18
-
19
- # Work around a bug in 64-bit JRuby
20
- if RUBY_PLATFORM == 'java' && ENV_JAVA['sun.arch.data.model'] == '64'
21
- typedef :ulong_long, :handle
22
- else
23
- typedef :uintptr_t, :handle
24
- end
25
-
26
- ffi_lib :kernel32
27
- ffi_convention :stdcall
28
-
29
- enum :token_info_class, [
30
- :TokenUser, 1,
31
- :TokenGroups,
32
- :TokenPrivileges,
33
- :TokenOwner,
34
- :TokenPrimaryGroup,
35
- :TokenDefaultDacl,
36
- :TokenSource,
37
- :TokenType,
38
- :TokenImpersonationLevel,
39
- :TokenStatistics,
40
- :TokenRestrictedSids,
41
- :TokenSessionId,
42
- :TokenGroupsAndPrivileges,
43
- :TokenSessionReference,
44
- :TokenSandBoxInert,
45
- :TokenAuditPolicy,
46
- :TokenOrigin,
47
- :TokenElevationType,
48
- :TokenLinkedToken,
49
- :TokenElevation,
50
- :TokenHasRestrictions,
51
- :TokenAccessInformation,
52
- :TokenVirtualizationAllowed,
53
- :TokenVirtualizationEnabled,
54
- :TokenIntegrityLevel,
55
- :TokenUIAccess,
56
- :TokenMandatoryPolicy,
57
- :TokenLogonSid,
58
- :TokenIsAppContainer,
59
- :TokenCapabilities,
60
- :TokenAppContainerSid,
61
- :TokenAppContainerNumber,
62
- :TokenUserClaimAttributes,
63
- :TokenDeviceClaimAttributes,
64
- :TokenRestrictedUserClaimAttributes,
65
- :TokenRestrictedDeviceClaimAttributes,
66
- :TokenDeviceGroups,
67
- :TokenRestrictedDeviceGroups,
68
- :TokenSecurityAttributes,
69
- :TokenIsRestricted,
70
- :MaxTokenInfoClass
71
- ]
72
-
73
- attach_pfunc :GetCurrentProcess, [], :handle
74
- attach_pfunc :GetCurrentThread, [], :handle
75
- attach_pfunc :GetVersionExA, [:ptr], :bool
76
- attach_pfunc :GetLastError, [], :dword
77
- attach_pfunc :CloseHandle, [:dword], :bool
78
-
79
- ffi_lib :advapi32
80
-
81
- attach_pfunc :AddAce, [:ptr, :dword, :dword, :ptr, :dword], :bool
82
- attach_pfunc :AddAccessAllowedAce, [:ptr, :dword, :dword, :ptr], :bool
83
- attach_pfunc :AddAccessAllowedAceEx, [:ptr, :dword, :dword, :dword, :ptr], :bool
84
- attach_pfunc :AddAccessDeniedAce, [:ptr, :dword, :dword, :ptr], :bool
85
- attach_pfunc :AddAccessDeniedAceEx, [:ptr, :dword, :dword, :dword, :ptr], :bool
86
- attach_pfunc :AllocateAndInitializeSid, [:ptr, :int, :dword, :dword, :dword, :dword, :dword, :dword, :dword, :dword, :ptr], :bool
87
- attach_pfunc :CheckTokenMembership, [:handle, :ptr, :ptr], :bool
88
- attach_pfunc :ConvertSidToStringSid, :ConvertSidToStringSidA, [:ptr, :ptr], :bool
89
- attach_pfunc :ConvertStringSidToSid, :ConvertStringSidToSidA, [:string, :ptr], :bool
90
- attach_pfunc :DeleteAce, [:ptr, :dword], :bool
91
- attach_pfunc :EqualSid, [:ptr, :ptr], :bool
92
- attach_pfunc :FindFirstFreeAce, [:ptr, :ptr], :bool
93
- attach_pfunc :GetAce, [:ptr, :dword, :ptr], :bool
94
- attach_pfunc :GetAclInformation, [:ptr, :ptr, :dword, :int], :bool
95
- attach_pfunc :GetLengthSid, [:ptr], :dword
96
- attach_pfunc :GetSidLengthRequired, [:uint], :dword
97
- attach_pfunc :GetSidSubAuthority, [:ptr, :dword], :ptr
98
- attach_pfunc :GetTokenInformation, [:handle, :token_info_class, :ptr, :dword, :ptr], :bool
99
- attach_pfunc :InitializeAcl, [:ptr, :dword, :dword], :bool
100
- attach_pfunc :InitializeSid, [:ptr, :ptr, :uint], :bool
101
- attach_pfunc :IsValidAcl, [:ptr], :bool
102
- attach_pfunc :IsValidSid, [:ptr], :bool
103
- attach_pfunc :IsWellKnownSid, [:ptr, :int], :bool
104
- attach_pfunc :LookupAccountName, :LookupAccountNameA, [:string, :string, :ptr, :ptr, :ptr, :ptr, :ptr], :bool
105
- attach_pfunc :LookupAccountSid, :LookupAccountSidA, [:string, :ptr, :ptr, :ptr, :ptr, :ptr, :ptr], :bool
106
- attach_pfunc :OpenProcessToken, [:handle, :dword, :ptr], :bool
107
- attach_pfunc :OpenThreadToken, [:handle, :dword, :bool, :ptr], :bool
108
- attach_pfunc :SetAclInformation, [:ptr, :ptr, :dword, :int], :bool
109
-
110
- attach_pfunc :ConvertSecurityDescriptorToStringSecurityDescriptor,
111
- :ConvertSecurityDescriptorToStringSecurityDescriptorA, [:ptr, :dword, :dword, :ptr, :ptr], :bool
112
- attach_pfunc :ConvertStringSecurityDescriptorToSecurityDescriptor,
113
- :ConvertStringSecurityDescriptorToSecurityDescriptorA, [:string, :dword, :ptr, :ptr], :bool
114
- end
115
- end
116
- end
1
+ require 'ffi'
2
+
3
+ module Windows
4
+ module Security
5
+ module Functions
6
+ extend FFI::Library
7
+
8
+ private
9
+
10
+ # Wrapper method for attach_function + private
11
+ def self.attach_pfunc(*args)
12
+ attach_function(*args)
13
+ private args[0]
14
+ end
15
+
16
+ typedef :ulong, :dword
17
+ typedef :pointer, :ptr
18
+
19
+ # Work around a bug in 64-bit JRuby
20
+ if RUBY_PLATFORM == 'java' && ENV_JAVA['sun.arch.data.model'] == '64'
21
+ typedef :ulong_long, :handle
22
+ else
23
+ typedef :uintptr_t, :handle
24
+ end
25
+
26
+ ffi_lib :kernel32
27
+ ffi_convention :stdcall
28
+
29
+ enum :token_info_class, [
30
+ :TokenUser, 1,
31
+ :TokenGroups,
32
+ :TokenPrivileges,
33
+ :TokenOwner,
34
+ :TokenPrimaryGroup,
35
+ :TokenDefaultDacl,
36
+ :TokenSource,
37
+ :TokenType,
38
+ :TokenImpersonationLevel,
39
+ :TokenStatistics,
40
+ :TokenRestrictedSids,
41
+ :TokenSessionId,
42
+ :TokenGroupsAndPrivileges,
43
+ :TokenSessionReference,
44
+ :TokenSandBoxInert,
45
+ :TokenAuditPolicy,
46
+ :TokenOrigin,
47
+ :TokenElevationType,
48
+ :TokenLinkedToken,
49
+ :TokenElevation,
50
+ :TokenHasRestrictions,
51
+ :TokenAccessInformation,
52
+ :TokenVirtualizationAllowed,
53
+ :TokenVirtualizationEnabled,
54
+ :TokenIntegrityLevel,
55
+ :TokenUIAccess,
56
+ :TokenMandatoryPolicy,
57
+ :TokenLogonSid,
58
+ :TokenIsAppContainer,
59
+ :TokenCapabilities,
60
+ :TokenAppContainerSid,
61
+ :TokenAppContainerNumber,
62
+ :TokenUserClaimAttributes,
63
+ :TokenDeviceClaimAttributes,
64
+ :TokenRestrictedUserClaimAttributes,
65
+ :TokenRestrictedDeviceClaimAttributes,
66
+ :TokenDeviceGroups,
67
+ :TokenRestrictedDeviceGroups,
68
+ :TokenSecurityAttributes,
69
+ :TokenIsRestricted,
70
+ :MaxTokenInfoClass
71
+ ]
72
+
73
+ attach_pfunc :GetCurrentProcess, [], :handle
74
+ attach_pfunc :GetCurrentThread, [], :handle
75
+ attach_pfunc :GetVersionExA, [:ptr], :bool
76
+ attach_pfunc :GetLastError, [], :dword
77
+ attach_pfunc :CloseHandle, [:dword], :bool
78
+
79
+ ffi_lib :advapi32
80
+
81
+ attach_pfunc :AddAce, [:ptr, :dword, :dword, :ptr, :dword], :bool
82
+ attach_pfunc :AddAccessAllowedAce, [:ptr, :dword, :dword, :ptr], :bool
83
+ attach_pfunc :AddAccessAllowedAceEx, [:ptr, :dword, :dword, :dword, :ptr], :bool
84
+ attach_pfunc :AddAccessDeniedAce, [:ptr, :dword, :dword, :ptr], :bool
85
+ attach_pfunc :AddAccessDeniedAceEx, [:ptr, :dword, :dword, :dword, :ptr], :bool
86
+ attach_pfunc :AllocateAndInitializeSid, [:ptr, :int, :dword, :dword, :dword, :dword, :dword, :dword, :dword, :dword, :ptr], :bool
87
+ attach_pfunc :CheckTokenMembership, [:handle, :ptr, :ptr], :bool
88
+ attach_pfunc :ConvertSidToStringSid, :ConvertSidToStringSidA, [:ptr, :ptr], :bool
89
+ attach_pfunc :ConvertStringSidToSid, :ConvertStringSidToSidA, [:string, :ptr], :bool
90
+ attach_pfunc :DeleteAce, [:ptr, :dword], :bool
91
+ attach_pfunc :EqualSid, [:ptr, :ptr], :bool
92
+ attach_pfunc :FindFirstFreeAce, [:ptr, :ptr], :bool
93
+ attach_pfunc :GetAce, [:ptr, :dword, :ptr], :bool
94
+ attach_pfunc :GetAclInformation, [:ptr, :ptr, :dword, :int], :bool
95
+ attach_pfunc :GetLengthSid, [:ptr], :dword
96
+ attach_pfunc :GetSidLengthRequired, [:uint], :dword
97
+ attach_pfunc :GetSidSubAuthority, [:ptr, :dword], :ptr
98
+ attach_pfunc :GetTokenInformation, [:handle, :token_info_class, :ptr, :dword, :ptr], :bool
99
+ attach_pfunc :InitializeAcl, [:ptr, :dword, :dword], :bool
100
+ attach_pfunc :InitializeSid, [:ptr, :ptr, :uint], :bool
101
+ attach_pfunc :IsValidAcl, [:ptr], :bool
102
+ attach_pfunc :IsValidSid, [:ptr], :bool
103
+ attach_pfunc :IsWellKnownSid, [:ptr, :int], :bool
104
+ attach_pfunc :LookupAccountName, :LookupAccountNameA, [:string, :string, :ptr, :ptr, :ptr, :ptr, :ptr], :bool
105
+ attach_pfunc :LookupAccountSid, :LookupAccountSidA, [:string, :ptr, :ptr, :ptr, :ptr, :ptr, :ptr], :bool
106
+ attach_pfunc :OpenProcessToken, [:handle, :dword, :ptr], :bool
107
+ attach_pfunc :OpenThreadToken, [:handle, :dword, :int, :ptr], :bool
108
+ attach_pfunc :SetAclInformation, [:ptr, :ptr, :dword, :int], :bool
109
+
110
+ attach_pfunc :ConvertSecurityDescriptorToStringSecurityDescriptor,
111
+ :ConvertSecurityDescriptorToStringSecurityDescriptorA, [:ptr, :dword, :dword, :ptr, :ptr], :bool
112
+ attach_pfunc :ConvertStringSecurityDescriptorToSecurityDescriptor,
113
+ :ConvertStringSecurityDescriptorToSecurityDescriptorA, [:string, :dword, :ptr, :ptr], :bool
114
+ end
115
+ end
116
+ end