Public/winfsp
1
0
Fork 0
mirror of https://github.com/winfsp/winfsp.git synced 2025-04-23 08:53:01 -05:00
Code Issues Packages Projects Releases Wiki Activity

launcher: testing

Browse Source
This commit is contained in:
Bill Zissimopoulos 2016-05-12 17:19:48 -07:00
parent c42e2a5958
commit 22c324de69
2 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/launcher/launcher.c
View File

@ -232,6 +232,8 @@ NTSTATUS SvcInstanceCreate(HANDLE ClientToken,
goto exit; goto exit;
} }
FspDebugLogSD(__FUNCTION__ ": SDDL = %s", SecurityDescriptor);
Result = SvcInstanceAccessCheck(ClientToken, SERVICE_START, SecurityDescriptor); Result = SvcInstanceAccessCheck(ClientToken, SERVICE_START, SecurityDescriptor);
if (!NT_SUCCESS(Result)) if (!NT_SUCCESS(Result))
goto exit; goto exit;
@ -460,6 +462,8 @@ static NTSTATUS SvcStart(FSP_SERVICE *Service, ULONG argc, PWSTR *argv)
&SecurityAttributes.lpSecurityDescriptor, 0)) &SecurityAttributes.lpSecurityDescriptor, 0))
goto fail; goto fail;
FspDebugLogSD(__FUNCTION__ ": SDDL = %s", SecurityAttributes.lpSecurityDescriptor);
SvcEvent = CreateEventW(0, TRUE, FALSE, 0); SvcEvent = CreateEventW(0, TRUE, FALSE, 0);
if (0 == SvcEvent) if (0 == SvcEvent)
goto fail; goto fail;

8
src/launcher/launcher.h
View File

@ -27,22 +27,22 @@
/* /*
* The launcher named pipe SDDL gives full access to LocalSystem and Administrators. * The launcher named pipe SDDL gives full access to LocalSystem and Administrators.
* It also gives generic read access and FILE_WRITE_DATA (SC) to Everyone. Note that * It also gives generic read access and FILE_WRITE_DATA (DC) to Everyone. Note that
* we cannot give generic write access or equivalently FILE_GENERIC_WRITE (FW) because * we cannot give generic write access or equivalently FILE_GENERIC_WRITE (FW) because
* we would also grant the FILE_CREATE_PIPE_INSTANCE right. * we would also grant the FILE_CREATE_PIPE_INSTANCE right.
*/ */
#define PIPE_SDDL "D:P(A;;GA;;;SY)(A;;GA;;;BA)(A;;GRSC;;;WD)" #define PIPE_SDDL "D:P(A;;GA;;;SY)(A;;GA;;;BA)(A;;GRDC;;;WD)"
/* /*
* The default service instance SDDL gives full access to LocalSystem and Administrators. * The default service instance SDDL gives full access to LocalSystem and Administrators.
* The only possible service instance rights are as follows: * The only possible service instance rights are as follows:
* RP SERVICE_START * RP SERVICE_START
* WP SERVICE_STOP * WP SERVICE_STOP
* SC SERVICE_QUERY_STATUS * LC SERVICE_QUERY_STATUS
* *
* To create a service that can be started, stopped or queried by Everyone, you can set * To create a service that can be started, stopped or queried by Everyone, you can set
* the following SDDL: * the following SDDL:
* D:P(A;;RPWPSC;;;WD) * D:P(A;;RPWPLC;;;WD)
*/ */
#define SVC_INSTANCE_DEFAULT_SDDL "O:SYG:SYD:P(A;;RPWPSC;;;SY)(A;;RPWPSC;;;BA)" #define SVC_INSTANCE_DEFAULT_SDDL "O:SYG:SYD:P(A;;RPWPSC;;;SY)(A;;RPWPSC;;;BA)"