1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
|
// Copyright 2021 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef BASE_WIN_SID_H_
#define BASE_WIN_SID_H_
#include <optional>
#include <string>
#include <vector>
#include "base/base_export.h"
#include "base/win/windows_types.h"
namespace base::win {
// Known capabilities defined in Windows 8.
enum class WellKnownCapability {
kInternetClient,
kInternetClientServer,
kPrivateNetworkClientServer,
kPicturesLibrary,
kVideosLibrary,
kMusicLibrary,
kDocumentsLibrary,
kEnterpriseAuthentication,
kSharedUserCertificates,
kRemovableStorage,
kAppointments,
kContacts
};
// A subset of well known SIDs to create.
enum class WellKnownSid {
kNull,
kWorld,
kCreatorOwner,
kNetwork,
kBatch,
kInteractive,
kService,
kAnonymous,
kSelf,
kAuthenticatedUser,
kRestricted,
kLocalSystem,
kLocalService,
kNetworkService,
kBuiltinAdministrators,
kBuiltinUsers,
kBuiltinGuests,
kUntrustedLabel,
kLowLabel,
kMediumLabel,
kHighLabel,
kSystemLabel,
kWriteRestricted,
kCreatorOwnerRights,
kAllApplicationPackages,
kAllRestrictedApplicationPackages
};
// This class is used to hold and generate SIDs.
class BASE_EXPORT Sid {
public:
// Create a Sid from an AppContainer capability name. The name can be
// completely arbitrary.
static Sid FromNamedCapability(const std::wstring& capability_name);
// Create a Sid from a known capability enumeration value. The Sids
// match with the list defined in Windows 8.
static Sid FromKnownCapability(WellKnownCapability capability);
// Create a SID from a well-known type.
static Sid FromKnownSid(WellKnownSid type);
// Create a Sid from a SDDL format string, such as S-1-1-0.
static std::optional<Sid> FromSddlString(const std::wstring& sddl_sid);
// Create a Sid from a PSID pointer.
static std::optional<Sid> FromPSID(const PSID sid);
// Generate a random SID value.
static Sid GenerateRandomSid();
// Create a SID for an integrity level RID.
static Sid FromIntegrityLevel(DWORD integrity_level);
// Create a vector of SIDs from a vector of SDDL format strings.
static std::optional<std::vector<Sid>> FromSddlStringVector(
const std::vector<std::wstring>& sddl_sids);
// Create a vector of SIDs from a vector of capability names.
static std::vector<Sid> FromNamedCapabilityVector(
const std::vector<std::wstring>& capability_names);
// Create a vector of SIDs from a vector of well-known capability.
static std::vector<Sid> FromKnownCapabilityVector(
const std::vector<WellKnownCapability>& capabilities);
// Create a vector of SIDs from a vector of well-known sids.
static std::vector<Sid> FromKnownSidVector(
const std::vector<WellKnownSid>& known_sids);
// Create a known SID.
explicit Sid(WellKnownSid known_sid);
// Create a known capability SID.
explicit Sid(WellKnownCapability known_capability);
Sid(const Sid&) = delete;
Sid& operator=(const Sid&) = delete;
Sid(Sid&& sid);
Sid& operator=(Sid&&);
~Sid();
// Returns sid as a PSID. This should only be used temporarily while the Sid
// is still within scope.
PSID GetPSID() const;
// Converts the SID to a SDDL format string.
std::optional<std::wstring> ToSddlString() const;
// Make a clone of the current Sid object.
Sid Clone() const;
// Is this Sid equal to another raw PSID?
bool Equal(PSID sid) const;
// Is this Sid equal to another Sid?
bool operator==(const Sid& sid) const;
private:
Sid(const void* sid, size_t length);
std::vector<char> sid_;
};
} // namespace base::win
#endif // BASE_WIN_SID_H_
|
