diff options
author | Jiyoung Yun <jy910.yun@samsung.com> | 2016-11-23 19:09:09 +0900 |
---|---|---|
committer | Jiyoung Yun <jy910.yun@samsung.com> | 2016-11-23 19:09:09 +0900 |
commit | 4b4aad7217d3292650e77eec2cf4c198ea9c3b4b (patch) | |
tree | 98110734c91668dfdbb126fcc0e15ddbd93738ca /src/inc/securityutil.h | |
parent | fa45f57ed55137c75ac870356a1b8f76c84b229c (diff) | |
download | coreclr-4b4aad7217d3292650e77eec2cf4c198ea9c3b4b.tar.gz coreclr-4b4aad7217d3292650e77eec2cf4c198ea9c3b4b.tar.bz2 coreclr-4b4aad7217d3292650e77eec2cf4c198ea9c3b4b.zip |
Imported Upstream version 1.1.0upstream/1.1.0
Diffstat (limited to 'src/inc/securityutil.h')
-rw-r--r-- | src/inc/securityutil.h | 53 |
1 files changed, 53 insertions, 0 deletions
diff --git a/src/inc/securityutil.h b/src/inc/securityutil.h new file mode 100644 index 0000000000..2278495bc5 --- /dev/null +++ b/src/inc/securityutil.h @@ -0,0 +1,53 @@ +// Licensed to the .NET Foundation under one or more agreements. +// The .NET Foundation licenses this file to you under the MIT license. +// See the LICENSE file in the project root for more information. + + +#ifndef SECURITYUTIL_H +#define SECURITYUTIL_H + +#include "winnt.h" + +// Security utility class. This is currently used by the debugger right-side and dbgshim to figure out the +// SECURITY_ATTRIBUTES to use on various IPC objects (named events, etc.). +// This is pretty debugger specific, and so perhaps doesn't actually belong in utilcode (that's just the most +// convenient way to share it between mscordbi and dbgshim.dll). This is also a pretty big mess. All of +// this ACL craziness is already gone in Arrowhead, so it's not a high priority to clean this up. +class SecurityUtil +{ +public: + + // + // This will generate ACL containing the current process and + // an allowed ACE on the target process of the given pid. + // + // Host should free returned *ppACL by calling FreeACL + // + static HRESULT GetACLOfPid(DWORD pid, PACL *ppACL); + + static void FreeACL(PACL pACL); + + static HRESULT GetMandatoryLabelFromProcess(HANDLE hProcess, LPBYTE * ppbLabel); + static DWORD * GetIntegrityLevelFromMandatorySID(PSID psidIntegrityLevelLabel); + + // instance functions. SecurityUtil is used to minimized memory allocation when converting + // pACL to SECURITY_ATTRIBUTES + // The needed memory to hold SECURITY_ATTRIBUTES and SECURITY_DESCRIPTOR are embedded + // in the SecurityUtil instance. + // + SecurityUtil(PACL pACL); + ~SecurityUtil(); + HRESULT Init(); + HRESULT Init(HANDLE pid); + HRESULT GetSA(SECURITY_ATTRIBUTES **PPSA); +private: + HRESULT SetSecurityDescriptorMandatoryLabel(PSID psidIntegrityLevelLabel); + SECURITY_ATTRIBUTES m_SA; + SECURITY_DESCRIPTOR m_SD; + PACL m_pACL; + // Saved by SetSecurityDescriptorMandatoryLabel so that the memory can be deleted properly + PACL m_pSacl; + bool m_fInitialized; +}; + +#endif // !SECURITYUTIL_H |