1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
|
// RegistrySecurityTest.cs - NUnit Test Cases for RegistrySecurity
//
// Authors:
// James Bellinger (jfb@zer7.com)
#if !MOBILE
using System;
using System.IO;
using System.Security.AccessControl;
using System.Security.Principal;
using Microsoft.Win32;
using NUnit.Framework;
namespace MonoTests.System.Security.AccessControl
{
[TestFixture]
public class RegistrySecurityTest
{
[Test]
public void ChangeGroupToEveryone ()
{
string keyName = @"SOFTWARE\Mono RegistrySecurityTest ChangeGroupToEveryone";
RegistrySecurity security;
if (PlatformID.Win32NT != Environment.OSVersion.Platform) {
Assert.Ignore ();
}
try {
using (RegistryKey key = Registry.CurrentUser.CreateSubKey (keyName)) {
// Before we begin manipulating this, make sure we're in the right spot.
Assert.AreEqual (key.Name, @"HKEY_CURRENT_USER\" + keyName);
// Set the group to Everyone.
SecurityIdentifier worldSid = new SecurityIdentifier ("WD");
security = key.GetAccessControl ();
security.SetGroup (worldSid);
key.SetAccessControl (security);
// Make sure it actually became Everyone.
security = key.GetAccessControl ();
Assert.AreEqual (worldSid, security.GetGroup (typeof(SecurityIdentifier)));
}
} finally {
Registry.CurrentUser.DeleteSubKey (keyName);
}
}
[Test]
public void EveryoneCanRead ()
{
string keyName = @"Software\Mono RegistrySecurityTest EveryoneCanRead";
RegistrySecurity security;
if (PlatformID.Win32NT != Environment.OSVersion.Platform) {
Assert.Ignore ();
}
try {
using (RegistryKey key = Registry.CurrentUser.CreateSubKey (keyName)) {
AuthorizationRuleCollection explicitRules, inheritedRules;
// Before we begin manipulating this, make sure we're in the right spot.
Assert.AreEqual (key.Name, @"HKEY_CURRENT_USER\" + keyName);
// Let's add Everyone to the read list.
SecurityIdentifier worldSid = new SecurityIdentifier ("WD");
security = key.GetAccessControl ();
inheritedRules = security.GetAccessRules (false, true, typeof (SecurityIdentifier));
Assert.AreNotEqual (0, inheritedRules.Count);
explicitRules = security.GetAccessRules (true, false, typeof (SecurityIdentifier));
Assert.AreEqual (0, explicitRules.Count);
security.AddAccessRule (new RegistryAccessRule (worldSid,
RegistryRights.FullControl,
AccessControlType.Allow));
key.SetAccessControl (security);
// Verify that we have our permission!
security = key.GetAccessControl ();
inheritedRules = security.GetAccessRules (false, true, typeof (SecurityIdentifier));
Assert.AreNotEqual (0, inheritedRules.Count);
explicitRules = security.GetAccessRules (true, false, typeof (SecurityIdentifier));
Assert.AreEqual (1, explicitRules.Count);
RegistryAccessRule rule = (RegistryAccessRule)explicitRules [0];
Assert.AreEqual (AccessControlType.Allow, rule.AccessControlType);
Assert.AreEqual (worldSid, rule.IdentityReference);
Assert.AreEqual (InheritanceFlags.None, rule.InheritanceFlags);
Assert.AreEqual (PropagationFlags.None, rule.PropagationFlags);
Assert.AreEqual (RegistryRights.FullControl, rule.RegistryRights);
Assert.IsFalse (rule.IsInherited);
}
} finally {
Registry.CurrentUser.DeleteSubKey (keyName);
}
}
}
}
#endif
|
