mirror of https://github.com/lianthony/NT4.0
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1256 lines
27 KiB
1256 lines
27 KiB
|
|
//////////////////////////////////////////////////////////////////////////////
|
|
// //
|
|
// Global Definitions //
|
|
// //
|
|
//////////////////////////////////////////////////////////////////////////////
|
|
|
|
|
|
|
|
|
|
//////////////////////////////////////////////////////////////////////////////
|
|
// //
|
|
// Global Variables //
|
|
// //
|
|
//////////////////////////////////////////////////////////////////////////////
|
|
|
|
NTSTATUS Status;
|
|
OBJECT_ATTRIBUTES ObjectAttributes;
|
|
STRING EventName;
|
|
UNICODE_STRING UnicodeEventName;
|
|
HANDLE EventHandle;
|
|
UNICODE_STRING PortName;
|
|
HANDLE EarPort;
|
|
HANDLE TalkPort;
|
|
PORT_MESSAGE RequestMessage;
|
|
SECURITY_QUALITY_OF_SERVICE SecurityQos;
|
|
ULONG RequestCount;
|
|
HANDLE ClientToken;
|
|
TOKEN_STATISTICS ClientTokenStatistics;
|
|
ULONG IgnoreLength;
|
|
|
|
HANDLE SepServerThread;
|
|
|
|
|
|
|
|
|
|
//////////////////////////////////////////////////////////////////////////////
|
|
// //
|
|
// Test Routine Definitions //
|
|
// //
|
|
//////////////////////////////////////////////////////////////////////////////
|
|
BOOLEAN
|
|
SepClientTestStatic(VOID);
|
|
|
|
BOOLEAN
|
|
SepClientTestDynamic(VOID);
|
|
|
|
BOOLEAN
|
|
SepClientTestEffectiveOnly(
|
|
BOOLEAN StaticTest
|
|
);
|
|
|
|
BOOLEAN
|
|
SepClientTestNotEffectiveOnly(
|
|
BOOLEAN StaticTest
|
|
);
|
|
|
|
BOOLEAN
|
|
SepClientTestAnonymous(
|
|
BOOLEAN StaticTest,
|
|
BOOLEAN EffectiveOnly
|
|
);
|
|
|
|
BOOLEAN
|
|
SepClientTestIdentification(
|
|
BOOLEAN StaticTest,
|
|
BOOLEAN EffectiveOnly
|
|
);
|
|
|
|
BOOLEAN
|
|
SepClientTestImpersonation(
|
|
BOOLEAN StaticTest,
|
|
BOOLEAN EffectiveOnly
|
|
);
|
|
|
|
VOID
|
|
SepClientConnect(
|
|
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel,
|
|
SECURITY_CONTEXT_TRACKING_MODE TrackingMode,
|
|
BOOLEAN EffectiveOnly
|
|
);
|
|
|
|
VOID
|
|
SepClientMakeRemoteCall( VOID );
|
|
|
|
VOID
|
|
SepClientDropConnection( VOID );
|
|
|
|
BOOLEAN
|
|
SepClientTest(VOID);
|
|
|
|
NTSTATUS
|
|
SepClientInitialize(
|
|
);
|
|
|
|
|
|
|
|
|
|
|
|
|
|
BOOLEAN
|
|
SepServerTestStatic(VOID);
|
|
|
|
BOOLEAN
|
|
SepServerTestDynamic(VOID);
|
|
|
|
BOOLEAN
|
|
SepServerTestEffectiveOnly(
|
|
BOOLEAN StaticTest
|
|
);
|
|
|
|
BOOLEAN
|
|
SepServerTestNotEffectiveOnly(
|
|
BOOLEAN StaticTest
|
|
);
|
|
|
|
BOOLEAN
|
|
SepServerTestAnonymous(
|
|
BOOLEAN StaticTest,
|
|
BOOLEAN EffectiveOnly
|
|
);
|
|
|
|
BOOLEAN
|
|
SepServerTestIdentification(
|
|
BOOLEAN StaticTest,
|
|
BOOLEAN EffectiveOnly
|
|
);
|
|
|
|
BOOLEAN
|
|
SepServerTestImpersonation(
|
|
BOOLEAN StaticTest,
|
|
BOOLEAN EffectiveOnly
|
|
);
|
|
|
|
VOID
|
|
SepServerWaitForNextConnect( VOID );
|
|
|
|
VOID
|
|
SepServerGetNextMessage( VOID );
|
|
|
|
VOID
|
|
SepServerCompleteMessage( VOID );
|
|
|
|
VOID
|
|
SepServerDropConnection( VOID );
|
|
|
|
|
|
|
|
BOOLEAN
|
|
SepServerTest(VOID);
|
|
|
|
NTSTATUS
|
|
SepServerInitialize(
|
|
);
|
|
|
|
VOID
|
|
SepServerSpawnClientProcess(VOID);
|
|
|
|
|
|
|
|
|
|
BOOLEAN
|
|
CtLpcQos (VOID);
|
|
|
|
|
|
//////////////////////////////////////////////////////////////////////////////
|
|
// //
|
|
// Client-Side Test Routines //
|
|
// //
|
|
//////////////////////////////////////////////////////////////////////////////
|
|
|
|
|
|
VOID
|
|
SepClientConnect(
|
|
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel,
|
|
SECURITY_CONTEXT_TRACKING_MODE TrackingMode,
|
|
BOOLEAN EffectiveOnly
|
|
)
|
|
|
|
{
|
|
|
|
SecurityQos.ImpersonationLevel = ImpersonationLevel;
|
|
SecurityQos.ContextTrackingMode = TrackingMode;
|
|
SecurityQos.EffectiveOnly = EffectiveOnly;
|
|
|
|
Status = NtConnectPort(
|
|
&TalkPort,
|
|
&PortName,
|
|
&SecurityQos,
|
|
0L,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL
|
|
); SEASSERT_SUCCESS(Status);
|
|
|
|
return;
|
|
}
|
|
|
|
|
|
VOID
|
|
SepClientMakeRemoteCall( VOID )
|
|
|
|
{
|
|
PORT_MESSAGE ReplyMessage;
|
|
|
|
Status = NtRequestWaitReplyPort(
|
|
TalkPort,
|
|
&RequestMessage,
|
|
&ReplyMessage
|
|
);
|
|
|
|
RequestCount += 1;
|
|
|
|
return;
|
|
}
|
|
|
|
|
|
VOID
|
|
SepClientDropConnection( VOID )
|
|
|
|
{
|
|
|
|
Status = NtClose( TalkPort ); SEASSERT_SUCCESS(Status);
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepClientTestStatic(VOID)
|
|
|
|
{
|
|
|
|
BOOLEAN CompletionStatus;
|
|
|
|
//
|
|
// Static Context Tracking ... Suite
|
|
//
|
|
|
|
CompletionStatus = SepClientTestEffectiveOnly( TRUE );
|
|
|
|
|
|
if (CompletionStatus == TRUE) {
|
|
|
|
CompletionStatus = SepClientTestNotEffectiveOnly( TRUE );
|
|
}
|
|
|
|
return CompletionStatus;
|
|
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepClientTestDynamic(VOID)
|
|
|
|
{
|
|
BOOLEAN CompletionStatus;
|
|
|
|
//
|
|
// Dynamic Context Tracking ... Suite
|
|
//
|
|
|
|
CompletionStatus = SepClientTestEffectiveOnly( FALSE );
|
|
|
|
|
|
if (CompletionStatus == TRUE) {
|
|
|
|
CompletionStatus = SepClientTestNotEffectiveOnly( FALSE );
|
|
}
|
|
|
|
return CompletionStatus;
|
|
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepClientTestEffectiveOnly(
|
|
BOOLEAN StaticTest
|
|
)
|
|
|
|
|
|
{
|
|
|
|
BOOLEAN CompletionStatus;
|
|
|
|
//
|
|
// Effective Only ... Test
|
|
//
|
|
|
|
CompletionStatus = SepClientTestAnonymous( StaticTest, TRUE );
|
|
if (CompletionStatus == TRUE) {
|
|
CompletionStatus = SepClientTestIdentification( StaticTest, TRUE );
|
|
}
|
|
if (CompletionStatus == TRUE) {
|
|
CompletionStatus = SepClientTestImpersonation( StaticTest, TRUE );
|
|
}
|
|
|
|
return CompletionStatus;
|
|
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepClientTestNotEffectiveOnly(
|
|
BOOLEAN StaticTest
|
|
)
|
|
|
|
{
|
|
BOOLEAN CompletionStatus;
|
|
|
|
//
|
|
// Not Effective Only ... Test
|
|
//
|
|
|
|
CompletionStatus = SepClientTestAnonymous( StaticTest, FALSE );
|
|
if (CompletionStatus == TRUE) {
|
|
CompletionStatus = SepClientTestIdentification( StaticTest, FALSE );
|
|
}
|
|
if (CompletionStatus == TRUE) {
|
|
CompletionStatus = SepClientTestImpersonation( StaticTest, FALSE );
|
|
}
|
|
|
|
return CompletionStatus;
|
|
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepClientTestAnonymous(
|
|
BOOLEAN StaticTest,
|
|
BOOLEAN EffectiveOnly
|
|
)
|
|
|
|
{
|
|
|
|
//////////////////////////////////////////////////////////////////////////
|
|
// //
|
|
// Anonymous Use Test //
|
|
// //
|
|
//////////////////////////////////////////////////////////////////////////
|
|
|
|
SECURITY_CONTEXT_TRACKING_MODE TrackingMode;
|
|
|
|
if (StaticTest) {
|
|
TrackingMode = SECURITY_STATIC_TRACKING;
|
|
} else {
|
|
TrackingMode = SECURITY_DYNAMIC_TRACKING;
|
|
}
|
|
|
|
if (!StaticTest) {
|
|
//
|
|
// No action for dynamic test
|
|
//
|
|
return TRUE;
|
|
}
|
|
|
|
//
|
|
// Anonymous Use ... Test
|
|
//
|
|
|
|
|
|
SepClientConnect(
|
|
SecurityAnonymous,
|
|
TrackingMode,
|
|
EffectiveOnly
|
|
);
|
|
|
|
SepClientMakeRemoteCall();
|
|
|
|
SepClientDropConnection();
|
|
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepClientTestIdentification(
|
|
BOOLEAN StaticTest,
|
|
BOOLEAN EffectiveOnly
|
|
)
|
|
|
|
{
|
|
|
|
//////////////////////////////////////////////////////////////////////////
|
|
// //
|
|
// Identification Use Test //
|
|
// //
|
|
//////////////////////////////////////////////////////////////////////////
|
|
|
|
SECURITY_CONTEXT_TRACKING_MODE TrackingMode;
|
|
|
|
if (StaticTest) {
|
|
TrackingMode = SECURITY_STATIC_TRACKING;
|
|
} else {
|
|
TrackingMode = SECURITY_DYNAMIC_TRACKING;
|
|
}
|
|
|
|
//
|
|
// Identification Use ... Test
|
|
//
|
|
|
|
|
|
SepClientConnect(
|
|
SecurityIdentification,
|
|
TrackingMode,
|
|
EffectiveOnly
|
|
);
|
|
|
|
SepClientMakeRemoteCall();
|
|
|
|
SepClientDropConnection();
|
|
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepClientTestImpersonation(
|
|
BOOLEAN StaticTest,
|
|
BOOLEAN EffectiveOnly
|
|
)
|
|
|
|
{
|
|
|
|
//////////////////////////////////////////////////////////////////////////
|
|
// //
|
|
// Impersonation Use Test //
|
|
// //
|
|
//////////////////////////////////////////////////////////////////////////
|
|
|
|
SECURITY_CONTEXT_TRACKING_MODE TrackingMode;
|
|
|
|
if (StaticTest) {
|
|
TrackingMode = SECURITY_STATIC_TRACKING;
|
|
} else {
|
|
TrackingMode = SECURITY_DYNAMIC_TRACKING;
|
|
}
|
|
|
|
|
|
//
|
|
// Impersonation Use ... Test
|
|
//
|
|
|
|
|
|
SepClientConnect(
|
|
SecurityImpersonation,
|
|
TrackingMode,
|
|
EffectiveOnly
|
|
);
|
|
|
|
SepClientMakeRemoteCall();
|
|
|
|
SepClientDropConnection();
|
|
|
|
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
BOOLEAN
|
|
SepClientTest(VOID)
|
|
//
|
|
// Tests:
|
|
//
|
|
// Static Context Tracking Tests
|
|
// Effective Only
|
|
// Anonymous
|
|
// Identification
|
|
// Impersonation
|
|
// Not Effective Only
|
|
// Anonymous
|
|
// Identification
|
|
// Impersonation
|
|
//
|
|
// Dynamic Context Tracking Tests
|
|
// Effective Only
|
|
// Identification
|
|
// Impersonation
|
|
// Not Effective Only
|
|
// Identification
|
|
// Impersonation
|
|
//
|
|
{
|
|
|
|
BOOLEAN CompletionStatus;
|
|
|
|
|
|
|
|
|
|
//
|
|
// Run the static test suite...
|
|
//
|
|
|
|
CompletionStatus = SepClientTestStatic();
|
|
|
|
//
|
|
// Run the dynamic test suite...
|
|
//
|
|
|
|
if (CompletionStatus == TRUE) {
|
|
CompletionStatus = SepClientTestDynamic();
|
|
}
|
|
|
|
DbgPrint("Se: Client Test Complete.\n");
|
|
|
|
|
|
return CompletionStatus;
|
|
}
|
|
|
|
|
|
NTSTATUS
|
|
SepClientInitialize(
|
|
)
|
|
|
|
{
|
|
|
|
|
|
|
|
DbgPrint("Se: Client Initializing ...\n");
|
|
|
|
//
|
|
// Initialize global variables
|
|
//
|
|
|
|
RequestMessage.u1.s1.DataLength = 0;
|
|
RequestMessage.u1.s1.TotalLength = (CSHORT)sizeof(PORT_MESSAGE);
|
|
RequestMessage.u2.ZeroInit = 0;
|
|
|
|
RequestCount = 0;
|
|
|
|
|
|
//
|
|
// Signal the named event to start the test
|
|
//
|
|
|
|
DbgPrint("Se: Client Starting Test ...\n");
|
|
Status = NtSetEvent( EventHandle, NULL ); SEASSERT_SUCCESS(Status);
|
|
|
|
Status = NtClose( EventHandle ); SEASSERT_SUCCESS(Status);
|
|
|
|
|
|
return STATUS_SUCCESS;
|
|
}
|
|
|
|
|
|
//////////////////////////////////////////////////////////////////////////////
|
|
// //
|
|
// Server-Side Test Routines //
|
|
// //
|
|
//////////////////////////////////////////////////////////////////////////////
|
|
|
|
|
|
VOID
|
|
SepServerWaitForNextConnect( VOID )
|
|
{
|
|
|
|
CONNECTION_REQUEST ConnectionRequest;
|
|
|
|
ConnectionRequest.Length = (ULONG)sizeof(CONNECTION_REQUEST);
|
|
|
|
//
|
|
// Wait for the client to connect to the port
|
|
//
|
|
|
|
Status = NtListenPort(
|
|
EarPort,
|
|
&ConnectionRequest,
|
|
NULL,
|
|
0L
|
|
); SEASSERT_SUCCESS(Status);
|
|
|
|
Status = NtAcceptConnectPort(
|
|
&TalkPort,
|
|
NULL,
|
|
&ConnectionRequest,
|
|
TRUE,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
0L
|
|
); SEASSERT_SUCCESS(Status);
|
|
|
|
Status = NtCompleteConnectPort( TalkPort ); SEASSERT_SUCCESS(Status);
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
VOID
|
|
SepServerGetNextMessage( VOID )
|
|
|
|
{
|
|
|
|
//
|
|
// Wait for the next message to come in...
|
|
//
|
|
|
|
Status = NtReplyWaitReceivePort(
|
|
EarPort,
|
|
NULL,
|
|
NULL,
|
|
&RequestMessage
|
|
); SEASSERT_SUCCESS(Status);
|
|
|
|
RequestCount += 1;
|
|
|
|
return;
|
|
}
|
|
|
|
VOID
|
|
SepServerCompleteMessage( VOID )
|
|
|
|
{
|
|
PORT_MESSAGE ReplyMessage;
|
|
|
|
ReplyMessage.u1.s1.DataLength = 0;
|
|
ReplyMessage.u1.s1.TotalLength = (CSHORT)sizeof(PORT_MESSAGE);
|
|
ReplyMessage.u2.ZeroInit = 0;
|
|
ReplyMessage.ClientId = RequestMessage.ClientId;
|
|
ReplyMessage.MessageId = RequestMessage.MessageId;
|
|
|
|
//
|
|
// Send the response message
|
|
//
|
|
|
|
Status = NtReplyPort(
|
|
EarPort,
|
|
&ReplyMessage
|
|
); SEASSERT_SUCCESS(Status);
|
|
|
|
return;
|
|
}
|
|
|
|
VOID
|
|
SepServerImpersonateClient( VOID )
|
|
|
|
{
|
|
|
|
Status = NtImpersonateClientOfPort(
|
|
TalkPort,
|
|
&RequestMessage
|
|
); SEASSERT_SUCCESS(Status);
|
|
|
|
}
|
|
|
|
|
|
VOID
|
|
SepServerRevertToSelf( VOID )
|
|
|
|
{
|
|
NTSTATUS TmpStatus;
|
|
HANDLE NullHandle;
|
|
|
|
NullHandle = NULL;
|
|
TmpStatus = NtSetInformationThread(
|
|
SepServerThread,
|
|
ThreadImpersonationToken,
|
|
(PVOID)&NullHandle,
|
|
(ULONG)sizeof(HANDLE)
|
|
); SEASSERT_SUCCESS(TmpStatus);
|
|
|
|
}
|
|
|
|
|
|
VOID
|
|
SepServerDropConnection( VOID )
|
|
|
|
{
|
|
Status = NtClose( TalkPort ); SEASSERT_SUCCESS(Status);
|
|
|
|
return;
|
|
}
|
|
|
|
BOOLEAN
|
|
SepServerTestStatic(VOID)
|
|
|
|
{
|
|
BOOLEAN CompletionStatus;
|
|
|
|
DbgPrint("Se: Static Context Tracking ... Suite\n");
|
|
|
|
CompletionStatus = SepServerTestEffectiveOnly( TRUE );
|
|
|
|
|
|
if (CompletionStatus == TRUE) {
|
|
|
|
CompletionStatus = SepServerTestNotEffectiveOnly( TRUE );
|
|
}
|
|
|
|
return CompletionStatus;
|
|
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepServerTestDynamic(VOID)
|
|
|
|
{
|
|
BOOLEAN CompletionStatus;
|
|
|
|
DbgPrint("Se: Dynamic Context Tracking ... Suite\n");
|
|
|
|
CompletionStatus = SepServerTestEffectiveOnly( FALSE );
|
|
|
|
|
|
if (CompletionStatus == TRUE) {
|
|
|
|
CompletionStatus = SepServerTestNotEffectiveOnly( FALSE );
|
|
}
|
|
|
|
return CompletionStatus;
|
|
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepServerTestEffectiveOnly(
|
|
BOOLEAN StaticTest
|
|
)
|
|
|
|
{
|
|
|
|
BOOLEAN CompletionStatus;
|
|
|
|
DbgPrint("Se: Effective Only ... Test\n");
|
|
|
|
CompletionStatus = SepServerTestAnonymous( StaticTest, TRUE );
|
|
if (CompletionStatus == TRUE) {
|
|
CompletionStatus = SepServerTestIdentification( StaticTest, TRUE );
|
|
}
|
|
if (CompletionStatus == TRUE) {
|
|
CompletionStatus = SepServerTestImpersonation( StaticTest, TRUE );
|
|
}
|
|
|
|
return CompletionStatus;
|
|
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepServerTestNotEffectiveOnly(
|
|
BOOLEAN StaticTest
|
|
)
|
|
|
|
{
|
|
|
|
BOOLEAN CompletionStatus;
|
|
|
|
DbgPrint("Se: Not Effective Only ... Test\n");
|
|
|
|
CompletionStatus = SepServerTestAnonymous( StaticTest, FALSE );
|
|
if (CompletionStatus == TRUE) {
|
|
CompletionStatus = SepServerTestIdentification( StaticTest, FALSE );
|
|
}
|
|
if (CompletionStatus == TRUE) {
|
|
CompletionStatus = SepServerTestImpersonation( StaticTest, FALSE );
|
|
}
|
|
|
|
return CompletionStatus;
|
|
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepServerTestAnonymous(
|
|
BOOLEAN StaticTest,
|
|
BOOLEAN EffectiveOnly
|
|
)
|
|
|
|
{
|
|
BOOLEAN CompletionStatus = TRUE;
|
|
|
|
//////////////////////////////////////////////////////////////////////////
|
|
// //
|
|
// Anonymous Use Test //
|
|
// //
|
|
//////////////////////////////////////////////////////////////////////////
|
|
|
|
|
|
if (!StaticTest) {
|
|
//
|
|
// No action for dynamic test
|
|
//
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
DbgPrint("Se: Anonymous Use ... ");
|
|
|
|
SepServerWaitForNextConnect();
|
|
|
|
SepServerGetNextMessage();
|
|
|
|
|
|
SepServerImpersonateClient();
|
|
Status = NtOpenThreadToken(
|
|
SepServerThread,
|
|
TOKEN_ALL_ACCESS,
|
|
TRUE,
|
|
&ClientToken
|
|
);
|
|
SepServerRevertToSelf();
|
|
if (Status == STATUS_CANT_OPEN_ANONYMOUS) {
|
|
|
|
DbgPrint(" Succeeded\n");
|
|
|
|
} else {
|
|
DbgPrint("* ! FAILED (srvr) ! *\n");
|
|
DbgPrint("Status is: 0x%lx \n", Status );
|
|
CompletionStatus = FALSE;
|
|
}
|
|
|
|
|
|
SepServerCompleteMessage();
|
|
|
|
SepServerDropConnection();
|
|
|
|
//
|
|
// Appease the compiler Gods..
|
|
//
|
|
|
|
if (EffectiveOnly) {;}
|
|
|
|
|
|
return CompletionStatus;
|
|
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepServerTestIdentification(
|
|
BOOLEAN StaticTest,
|
|
BOOLEAN EffectiveOnly
|
|
)
|
|
|
|
{
|
|
|
|
BOOLEAN CompletionStatus = TRUE;
|
|
//////////////////////////////////////////////////////////////////////////
|
|
// //
|
|
// Identification Use Test //
|
|
// //
|
|
//////////////////////////////////////////////////////////////////////////
|
|
|
|
DbgPrint("Se: Identification Use ... ");
|
|
|
|
SepServerWaitForNextConnect();
|
|
|
|
SepServerGetNextMessage();
|
|
|
|
SepServerImpersonateClient();
|
|
Status = NtOpenThreadToken(
|
|
SepServerThread,
|
|
TOKEN_ALL_ACCESS,
|
|
TRUE,
|
|
&ClientToken
|
|
); SEASSERT_SUCCESS(Status);
|
|
SepServerRevertToSelf();
|
|
Status = NtQueryInformationToken(
|
|
ClientToken,
|
|
TokenStatistics,
|
|
&ClientTokenStatistics,
|
|
(ULONG)sizeof(TOKEN_STATISTICS),
|
|
&IgnoreLength
|
|
); SEASSERT_SUCCESS(Status);
|
|
|
|
if ( (ClientTokenStatistics.TokenType == TokenImpersonation) &&
|
|
(ClientTokenStatistics.ImpersonationLevel == SecurityIdentification)
|
|
) {
|
|
DbgPrint(" Succeeded\n");
|
|
|
|
} else {
|
|
DbgPrint("* ! FAILED (srvr) ! *\n");
|
|
CompletionStatus = FALSE;
|
|
}
|
|
|
|
|
|
SepServerCompleteMessage();
|
|
|
|
SepServerDropConnection();
|
|
|
|
//
|
|
// Appease the compiler Gods..
|
|
//
|
|
if (StaticTest) {;}
|
|
if (EffectiveOnly) {;}
|
|
|
|
return CompletionStatus;
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepServerTestImpersonation(
|
|
BOOLEAN StaticTest,
|
|
BOOLEAN EffectiveOnly
|
|
)
|
|
|
|
{
|
|
BOOLEAN CompletionStatus = TRUE;
|
|
|
|
//////////////////////////////////////////////////////////////////////////
|
|
// //
|
|
// Impersonation Use Test //
|
|
// //
|
|
//////////////////////////////////////////////////////////////////////////
|
|
|
|
DbgPrint("Se: Impersonation Use ... ");
|
|
|
|
|
|
SepServerWaitForNextConnect();
|
|
|
|
SepServerGetNextMessage();
|
|
|
|
|
|
|
|
SepServerImpersonateClient();
|
|
Status = NtOpenThreadToken(
|
|
SepServerThread,
|
|
TOKEN_ALL_ACCESS,
|
|
TRUE,
|
|
&ClientToken
|
|
); SEASSERT_SUCCESS(Status);
|
|
SepServerRevertToSelf();
|
|
Status = NtQueryInformationToken(
|
|
ClientToken,
|
|
TokenStatistics,
|
|
&ClientTokenStatistics,
|
|
(ULONG)sizeof(TOKEN_STATISTICS),
|
|
&IgnoreLength
|
|
); SEASSERT_SUCCESS(Status);
|
|
|
|
if ( (ClientTokenStatistics.TokenType == TokenImpersonation) &&
|
|
(ClientTokenStatistics.ImpersonationLevel == SecurityImpersonation)
|
|
) {
|
|
DbgPrint(" Succeeded\n");
|
|
|
|
} else {
|
|
DbgPrint("* ! FAILED (srvr) ! *\n");
|
|
CompletionStatus = FALSE;
|
|
}
|
|
|
|
|
|
|
|
|
|
SepServerCompleteMessage();
|
|
|
|
SepServerDropConnection();
|
|
|
|
//
|
|
// Appease the compiler gods
|
|
//
|
|
if (StaticTest) {;}
|
|
if (EffectiveOnly) {;}
|
|
|
|
return CompletionStatus;
|
|
}
|
|
|
|
|
|
BOOLEAN
|
|
SepServerTest(VOID)
|
|
//
|
|
// Tests:
|
|
//
|
|
// Static Context Tracking Tests
|
|
// Effective Only
|
|
// Anonymous
|
|
// Identification
|
|
// Impersonation
|
|
// Not Effective Only
|
|
// Anonymous
|
|
// Identification
|
|
// Impersonation
|
|
//
|
|
// Dynamic Context Tracking Tests
|
|
// Effective Only
|
|
// Identification
|
|
// Impersonation
|
|
// Not Effective Only
|
|
// Identification
|
|
// Impersonation
|
|
//
|
|
{
|
|
|
|
BOOLEAN CompletionStatus;
|
|
|
|
|
|
DbgPrint("Se: Server Starting Test ...\n");
|
|
|
|
//
|
|
// Run the static test suite...
|
|
//
|
|
|
|
CompletionStatus = SepServerTestStatic();
|
|
|
|
//
|
|
// Run the dynamic test suite...
|
|
//
|
|
|
|
if (CompletionStatus == TRUE) {
|
|
CompletionStatus = SepServerTestDynamic();
|
|
}
|
|
|
|
DbgPrint("Se: Server Test Complete.\n");
|
|
|
|
//
|
|
// Print test results
|
|
//
|
|
|
|
DbgPrint("\n");
|
|
DbgPrint("\n");
|
|
DbgPrint("**********************\n");
|
|
DbgPrint("** **\n");
|
|
|
|
if (CompletionStatus == TRUE) {
|
|
DbgPrint("** Test Succeeded **\n");
|
|
} else {
|
|
DbgPrint("** Test Failed !! **\n");
|
|
}
|
|
|
|
DbgPrint("** **\n");
|
|
DbgPrint("**********************\n");
|
|
|
|
return CompletionStatus;
|
|
|
|
}
|
|
|
|
NTSTATUS
|
|
SepServerInitialize(
|
|
)
|
|
|
|
{
|
|
|
|
NTSTATUS Status;
|
|
OBJECT_ATTRIBUTES ThreadAttributes;
|
|
PTEB CurrentTeb;
|
|
|
|
|
|
DbgPrint("Se: Server Initializing ...\n");
|
|
|
|
//
|
|
// Initialize global variables
|
|
//
|
|
|
|
RequestCount = 0;
|
|
|
|
//
|
|
// Get a handle to our thread to so that we can access our thread
|
|
// even when impersonating an anonymous client (which we can't do
|
|
// using NtCurrentThread()).
|
|
//
|
|
|
|
CurrentTeb = NtCurrentTeb();
|
|
InitializeObjectAttributes(&ThreadAttributes, NULL, 0, NULL, NULL);
|
|
Status = NtOpenThread(
|
|
&SepServerThread, // TargetHandle
|
|
THREAD_ALL_ACCESS, // DesiredAccess
|
|
&ThreadAttributes, // ObjectAttributes
|
|
&CurrentTeb->ClientId // ClientId
|
|
);
|
|
ASSERT( NT_SUCCESS(Status) );
|
|
|
|
|
|
//
|
|
// Create the server's port
|
|
//
|
|
|
|
InitializeObjectAttributes(
|
|
&ObjectAttributes,
|
|
&PortName,
|
|
0,
|
|
NULL,
|
|
NULL );
|
|
|
|
Status = NtCreatePort(
|
|
&EarPort,
|
|
&ObjectAttributes,
|
|
0,
|
|
4,
|
|
4 * 256
|
|
); SEASSERT_SUCCESS(Status);
|
|
|
|
|
|
|
|
//
|
|
// Spawn a copy of ourselves...
|
|
//
|
|
|
|
DbgPrint("Se: Server Spawning client process ...\n");
|
|
SepServerSpawnClientProcess();
|
|
|
|
|
|
DbgPrint("Se: Server waiting for start of test signal ...\n");
|
|
|
|
Status = NtWaitForSingleObject(
|
|
EventHandle,
|
|
TRUE,
|
|
NULL
|
|
); SEASSERT_SUCCESS(Status);
|
|
|
|
Status = NtClose( EventHandle ); SEASSERT_SUCCESS(Status);
|
|
|
|
|
|
return STATUS_SUCCESS;
|
|
}
|
|
|
|
VOID
|
|
SepServerSpawnClientProcess(VOID)
|
|
|
|
{
|
|
|
|
|
|
RTL_USER_PROCESS_INFORMATION ProcessInformation;
|
|
STRING ImagePathName, ProgramName;
|
|
UNICODE_STRING UnicodeImagePathName, UnicodeProgramName;
|
|
PRTL_USER_PROCESS_PARAMETERS ProcessParameters;
|
|
|
|
RtlInitString( &ProgramName, "\\SystemRoot\\Bin\\utlpcqos.exe" );
|
|
Status = RtlAnsiStringToUnicodeString(
|
|
&UnicodeProgramName,
|
|
&ProgramName,
|
|
TRUE ); SEASSERT_SUCCESS( NT_SUCCESS(Status) );
|
|
RtlInitString( &ImagePathName, "utlpcqos.exe");
|
|
Status = RtlAnsiStringToUnicodeString(
|
|
&UnicodeImagePathName,
|
|
&ImagePathName,
|
|
TRUE ); SEASSERT_SUCCESS( NT_SUCCESS(Status) );
|
|
|
|
Status = RtlCreateProcessParameters(
|
|
&ProcessParameters,
|
|
&ImagePathName, //UNICODEFIX &UnicodeImagePathName,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL,
|
|
NULL
|
|
);
|
|
|
|
SEASSERT_SUCCESS(Status);
|
|
|
|
|
|
Status = RtlCreateUserProcess(
|
|
&ProgramName, // UNICODEFIX &UnicodeProgramName,
|
|
ProcessParameters, // ProcessParameters
|
|
NULL, // ProcessSecurityDescriptor
|
|
NULL, // ThreadSecurityDescriptor
|
|
NtCurrentProcess(), // ParentProcess
|
|
FALSE, // InheritHandles
|
|
NULL, // DebugPort
|
|
NULL, // ExceptionPort
|
|
&ProcessInformation // ProcessInformation
|
|
); SEASSERT_SUCCESS(Status);
|
|
|
|
Status = NtResumeThread(
|
|
ProcessInformation.Thread,
|
|
NULL
|
|
); SEASSERT_SUCCESS(Status);
|
|
|
|
RtlDestroyProcessParameters( ProcessParameters );
|
|
RtlFreeUnicodeString( &UnicodeProgramName );
|
|
RtlFreeUnicodeString( &UnicodeImagePathName );
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
//////////////////////////////////////////////////////////////////////////////
|
|
// //
|
|
// Main Program Entry Routine //
|
|
// //
|
|
//////////////////////////////////////////////////////////////////////////////
|
|
|
|
BOOLEAN
|
|
CtLpcQos (VOID)
|
|
{
|
|
|
|
BOOLEAN Result = TRUE;
|
|
|
|
RtlInitUnicodeString( &PortName, L"\\TestLpcQosServerPort" );
|
|
|
|
//
|
|
// Determine whether we are the client or server side of the test.
|
|
// This is done by creating or opening a named event object. If the
|
|
// event does not yet exist, then we are the client, and must create
|
|
// the server process. Otherwise, we are the server and the client
|
|
// is waiting for us to signal the event.
|
|
//
|
|
|
|
RtlInitString( &EventName, "\\TestLpcQosEvent" );
|
|
Status = RtlAnsiStringToUnicodeString(
|
|
&UnicodeEventName,
|
|
&EventName,
|
|
TRUE ); SEASSERT_SUCCESS( NT_SUCCESS(Status) );
|
|
InitializeObjectAttributes(
|
|
&ObjectAttributes,
|
|
&UnicodeEventName,
|
|
OBJ_OPENIF,
|
|
NULL,
|
|
NULL
|
|
);
|
|
Status = NtCreateEvent(
|
|
&EventHandle,
|
|
EVENT_ALL_ACCESS,
|
|
&ObjectAttributes,
|
|
SynchronizationEvent,
|
|
FALSE
|
|
);
|
|
|
|
if (Status == STATUS_OBJECT_NAME_EXISTS) {
|
|
|
|
//
|
|
// Server is already running, therefore, this process gets to be
|
|
// the client.
|
|
//
|
|
|
|
Status = SepClientInitialize(); SEASSERT_SUCCESS(Status);
|
|
Result = SepClientTest();
|
|
|
|
} else {
|
|
|
|
SEASSERT_SUCCESS(Status);
|
|
|
|
//
|
|
// Event wasn't yet there, so we must be the server.
|
|
//
|
|
|
|
DbgPrint("Se: Starting LPC Impersonation Test.\n");
|
|
|
|
Status = SepServerInitialize(); SEASSERT_SUCCESS(Status);
|
|
Result = SepServerTest();
|
|
|
|
DbgPrint("Se: End Test.\n");
|
|
|
|
}
|
|
|
|
|
|
|
|
Status = NtTerminateThread( NtCurrentThread(), STATUS_SUCCESS);
|
|
SEASSERT_SUCCESS(Status);
|
|
|
|
return Result;
|
|
|
|
}
|