3 Copyright (c) Alex Ionescu. All rights reserved.
11 Type definitions for the security manager.
15 Alex Ionescu (alexi@tinykrnl.org) - Updated - 27-Feb-2006
30 #define SECURITY_INTERNETSITE_AUTHORITY {0,0,0,0,0,7}
34 // Privilege constants
36 #define SE_MIN_WELL_KNOWN_PRIVILEGE (2L)
37 #define SE_CREATE_TOKEN_PRIVILEGE (2L)
38 #define SE_ASSIGNPRIMARYTOKEN_PRIVILEGE (3L)
39 #define SE_LOCK_MEMORY_PRIVILEGE (4L)
40 #define SE_INCREASE_QUOTA_PRIVILEGE (5L)
41 #define SE_UNSOLICITED_INPUT_PRIVILEGE (6L)
42 #define SE_MACHINE_ACCOUNT_PRIVILEGE (6L)
43 #define SE_TCB_PRIVILEGE (7L)
44 #define SE_SECURITY_PRIVILEGE (8L)
45 #define SE_TAKE_OWNERSHIP_PRIVILEGE (9L)
46 #define SE_LOAD_DRIVER_PRIVILEGE (10L)
47 #define SE_SYSTEM_PROFILE_PRIVILEGE (11L)
48 #define SE_SYSTEMTIME_PRIVILEGE (12L)
49 #define SE_PROF_SINGLE_PROCESS_PRIVILEGE (13L)
50 #define SE_INC_BASE_PRIORITY_PRIVILEGE (14L)
51 #define SE_CREATE_PAGEFILE_PRIVILEGE (15L)
52 #define SE_CREATE_PERMANENT_PRIVILEGE (16L)
53 #define SE_BACKUP_PRIVILEGE (17L)
54 #define SE_RESTORE_PRIVILEGE (18L)
55 #define SE_SHUTDOWN_PRIVILEGE (19L)
56 #define SE_DEBUG_PRIVILEGE (20L)
57 #define SE_AUDIT_PRIVILEGE (21L)
58 #define SE_SYSTEM_ENVIRONMENT_PRIVILEGE (22L)
59 #define SE_CHANGE_NOTIFY_PRIVILEGE (23L)
60 #define SE_REMOTE_SHUTDOWN_PRIVILEGE (24L)
61 #define SE_MAX_WELL_KNOWN_PRIVILEGE (SE_REMOTE_SHUTDOWN_PRIVILEGE)
66 // User and Group-related SID Attributes
68 #define SE_GROUP_MANDATORY 0x00000001
69 #define SE_GROUP_ENABLED_BY_DEFAULT 0x00000002
70 #define SE_GROUP_ENABLED 0x00000004
71 #define SE_GROUP_OWNER 0x00000008
72 #define SE_GROUP_USE_FOR_DENY_ONLY 0x00000010
73 #define SE_GROUP_INTEGRITY 0x00000020
74 #define SE_GROUP_INTEGRITY_ENABLED 0x00000040
75 #define SE_GROUP_RESOURCE 0x20000000
76 #define SE_GROUP_LOGON_ID 0xC0000000
78 #define SE_GROUP_VALID_ATTRIBUTES \
79 (SE_GROUP_MANDATORY | \
80 SE_GROUP_ENABLED_BY_DEFAULT | \
83 SE_GROUP_USE_FOR_DENY_ONLY | \
86 SE_GROUP_INTEGRITY | \
87 SE_GROUP_INTEGRITY_ENABLED)
90 // Audit and Policy Structures
92 typedef struct _SEP_AUDIT_POLICY_CATEGORIES
98 UCHAR DetailedTracking
:4;
100 UCHAR AccountManagement
:4;
101 UCHAR DirectoryServiceAccess
:4;
102 UCHAR AccountLogon
:4;
103 } SEP_AUDIT_POLICY_CATEGORIES
, *PSEP_AUDIT_POLICY_CATEGORIES
;
105 typedef struct _SEP_AUDIT_POLICY_OVERLAY
107 ULONGLONG PolicyBits
:36;
109 } SEP_AUDIT_POLICY_OVERLAY
, *PSEP_AUDIT_POLICY_OVERLAY
;
111 typedef struct _SEP_AUDIT_POLICY
115 SEP_AUDIT_POLICY_CATEGORIES PolicyElements
;
116 SEP_AUDIT_POLICY_OVERLAY PolicyOverlay
;
119 } SEP_AUDIT_POLICY
, *PSEP_AUDIT_POLICY
;
121 typedef struct _SE_AUDIT_PROCESS_CREATION_INFO
123 POBJECT_NAME_INFORMATION ImageFileName
;
124 } SE_AUDIT_PROCESS_CREATION_INFO
, *PSE_AUDIT_PROCESS_CREATION_INFO
;
127 // Token and auxiliary data
129 typedef struct _TOKEN
131 TOKEN_SOURCE TokenSource
; /* 0x00 */
132 LUID TokenId
; /* 0x10 */
133 LUID AuthenticationId
; /* 0x18 */
134 LUID ParentTokenId
; /* 0x20 */
135 LARGE_INTEGER ExpirationTime
; /* 0x28 */
136 struct _ERESOURCE
*TokenLock
; /* 0x30 */
137 SEP_AUDIT_POLICY AuditPolicy
; /* 0x38 */
138 LUID ModifiedId
; /* 0x40 */
139 ULONG SessionId
; /* 0x48 */
140 ULONG UserAndGroupCount
; /* 0x4C */
141 ULONG RestrictedSidCount
; /* 0x50 */
142 ULONG PrivilegeCount
; /* 0x54 */
143 ULONG VariableLength
; /* 0x58 */
144 ULONG DynamicCharged
; /* 0x5C */
145 ULONG DynamicAvailable
; /* 0x60 */
146 ULONG DefaultOwnerIndex
; /* 0x64 */
147 PSID_AND_ATTRIBUTES UserAndGroups
; /* 0x68 */
148 PSID_AND_ATTRIBUTES RestrictedSids
; /* 0x6C */
149 PSID PrimaryGroup
; /* 0x70 */
150 PLUID_AND_ATTRIBUTES Privileges
; /* 0x74 */
151 PULONG DynamicPart
; /* 0x78 */
152 PACL DefaultDacl
; /* 0x7C */
153 TOKEN_TYPE TokenType
; /* 0x80 */
154 SECURITY_IMPERSONATION_LEVEL ImpersonationLevel
; /* 0x84 */
155 ULONG TokenFlags
; /* 0x88 */
156 BOOLEAN TokenInUse
; /* 0x8C */
157 PVOID ProxyData
; /* 0x90 */
158 PVOID AuditData
; /* 0x94 */
159 LUID OriginatingLogonSession
; /* 0x98 */
160 ULONG VariablePart
; /* 0xA0 */
163 typedef struct _AUX_ACCESS_DATA
165 PPRIVILEGE_SET PrivilegeSet
;
166 GENERIC_MAPPING GenericMapping
;
168 } AUX_ACCESS_DATA
, *PAUX_ACCESS_DATA
;
173 extern PACL SePublicDefaultDacl
;
174 extern PACL SeSystemDefaultDacl
;