You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
535 lines
14 KiB
535 lines
14 KiB
|
|
/*++
|
|
|
|
Copyright (c) 1995 Microsoft Corporation
|
|
|
|
Module Name:
|
|
|
|
syssec.c
|
|
|
|
Abstract:
|
|
|
|
Security installation routines.
|
|
|
|
Author:
|
|
|
|
Vijesh Shetty (vijeshs) 6-Mar-1997
|
|
|
|
Revision History:
|
|
|
|
|
|
--*/
|
|
|
|
#include "setupp.h"
|
|
#include "scesetup.h"
|
|
#pragma hdrstop
|
|
|
|
#if DBG
|
|
#define SEC_DEBUG 1
|
|
#else
|
|
#define SEC_DEBUG 0
|
|
#endif
|
|
|
|
|
|
#define SECURITY_WKS_INF_FILE L"defltwk.inf"
|
|
#define SECURITY_SRV_INF_FILE L"defltsv.inf"
|
|
|
|
//
|
|
// Structure for thread parameter
|
|
//
|
|
typedef struct _SYSSEC_THREAD_PARAMS {
|
|
|
|
HWND Window;
|
|
HWND ProgressWindow;
|
|
DWORD ThreadId;
|
|
ULONG Sec_StartAtPercent;
|
|
ULONG Sec_StopAtPercent;
|
|
BOOL SendWmQuit;
|
|
|
|
} SYSSEC_THREAD_PARAMS, *PSYSSEC_THREAD_PARAMS;
|
|
|
|
BOOL SetupSecurityGaugeUpdate(
|
|
IN HWND Window,
|
|
IN UINT NotificationCode,
|
|
IN UINT NotificationSpecificValue,
|
|
IN LPARAM lParam );
|
|
|
|
|
|
|
|
HWND SetupProgWindow;
|
|
HANDLE SceSetupRootSecurityThreadHandle = NULL;
|
|
BOOL bSceSetupRootSecurityComplete = FALSE;
|
|
|
|
|
|
DWORD
|
|
pSetupInstallSecurity(
|
|
IN PVOID ThreadParam
|
|
)
|
|
{
|
|
BOOL b;
|
|
BOOL Success;
|
|
UINT i;
|
|
UINT GaugeRange;
|
|
PSYSSEC_THREAD_PARAMS Context;
|
|
DWORD NumberOfTicks;
|
|
DWORD_PTR ret;
|
|
HINSTANCE Dll_Handle;
|
|
FARPROC SceSystem;
|
|
WCHAR SecurityLogPath[MAX_PATH];
|
|
DWORD Result;
|
|
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_INFO_LEVEL,
|
|
"SETUP: Entering Security Block. \n"));
|
|
|
|
Context = ThreadParam;
|
|
|
|
|
|
//
|
|
// Assume success.
|
|
//
|
|
Success = TRUE;
|
|
|
|
|
|
try{
|
|
|
|
|
|
|
|
if ( (Dll_Handle = LoadLibrary( L"scecli.dll" )) &&
|
|
(SceSystem = GetProcAddress(Dll_Handle,"SceSetupSystemByInfName")) ) {
|
|
|
|
|
|
Result = GetWindowsDirectory( SecurityLogPath, MAX_PATH );
|
|
if( Result == 0) {
|
|
MYASSERT(FALSE);
|
|
return FALSE;
|
|
}
|
|
pSetupConcatenatePaths( SecurityLogPath, L"security\\logs\\scesetup.log", (sizeof(SecurityLogPath)/sizeof(WCHAR)), NULL );
|
|
|
|
//
|
|
//Call for no. of ticks
|
|
//
|
|
|
|
if ( ret = SceSystem(ProductType ? SECURITY_SRV_INF_FILE : SECURITY_WKS_INF_FILE,
|
|
SecurityLogPath,
|
|
Upgrade ? 0 : (AREA_FILE_SECURITY | AREA_REGISTRY_SECURITY),
|
|
Upgrade ? (SCESETUP_QUERY_TICKS | SCESETUP_UPGRADE_SYSTEM) : SCESETUP_QUERY_TICKS,
|
|
SetupSecurityGaugeUpdate,
|
|
(PVOID)&NumberOfTicks) ) {
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_WARNING_LEVEL,
|
|
"SETUP: Error in SCE while querying ticks - (%d)\n",
|
|
ret));
|
|
|
|
SetuplogError(
|
|
LogSevError,
|
|
SETUPLOG_USE_MESSAGEID,
|
|
MSG_LOG_SCE_SETUP_ERROR,
|
|
NULL,
|
|
SETUPLOG_USE_MESSAGEID,
|
|
ret, NULL, NULL);
|
|
Success = FALSE;
|
|
} else {
|
|
|
|
GaugeRange = (NumberOfTicks*100/(Context->Sec_StopAtPercent - Context->Sec_StartAtPercent));
|
|
SendMessage(Context->ProgressWindow, WMX_PROGRESSTICKS, NumberOfTicks, 0);
|
|
SendMessage(Context->ProgressWindow,PBM_SETRANGE,0,MAKELPARAM(0,GaugeRange));
|
|
SendMessage(Context->ProgressWindow,PBM_SETPOS,GaugeRange*Context->Sec_StartAtPercent/100,0);
|
|
SendMessage(Context->ProgressWindow,PBM_SETSTEP,1,0);
|
|
|
|
|
|
|
|
if ( ret = SceSystem(ProductType ? SECURITY_SRV_INF_FILE : SECURITY_WKS_INF_FILE,
|
|
SecurityLogPath,
|
|
Upgrade ? 0 : (AREA_FILE_SECURITY | AREA_REGISTRY_SECURITY),
|
|
Upgrade ? SCESETUP_UPGRADE_SYSTEM : SCESETUP_CONFIGURE_SECURITY,
|
|
SetupSecurityGaugeUpdate,
|
|
(PVOID)(Context->ProgressWindow) )) {
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_WARNING_LEVEL,
|
|
"SETUP: Error in SCE while setting security - (%d)\n",
|
|
ret));
|
|
|
|
SetuplogError(
|
|
LogSevError,
|
|
SETUPLOG_USE_MESSAGEID,
|
|
MSG_LOG_SCE_SETUP_ERROR,
|
|
NULL,
|
|
SETUPLOG_USE_MESSAGEID,
|
|
ret, NULL, NULL);
|
|
|
|
Success = FALSE;
|
|
}
|
|
|
|
}
|
|
|
|
FreeLibrary(Dll_Handle);
|
|
|
|
} else {
|
|
|
|
if ( Dll_Handle )
|
|
FreeLibrary(Dll_Handle);
|
|
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_WARNING_LEVEL,
|
|
"SETUP: Error while loading SCE\n"));
|
|
|
|
SetuplogError(
|
|
LogSevError,
|
|
SETUPLOG_USE_MESSAGEID,
|
|
MSG_LOG_LOAD_SECURITY_LIBRARY_FAILED,NULL,NULL);
|
|
|
|
|
|
}
|
|
|
|
} except(EXCEPTION_EXECUTE_HANDLER) {
|
|
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_WARNING_LEVEL,
|
|
"SETUP: Exception in SCE while applying default security \n"));
|
|
|
|
SetuplogError(
|
|
LogSevError,
|
|
SETUPLOG_USE_MESSAGEID,
|
|
MSG_LOG_SCE_EXCEPTION,NULL,NULL);
|
|
|
|
}
|
|
|
|
|
|
SendMessage(Context->ProgressWindow,PBM_SETPOS,(GaugeRange*Context->Sec_StopAtPercent/100),0);
|
|
|
|
if ( Context->SendWmQuit ) {
|
|
//
|
|
// We send WM_QUIT only if this routine was started as a separate thread.
|
|
// Otherwise, the WM_QUIT will be processed by the wizard, and it will make it stop.
|
|
//
|
|
PostThreadMessage(Context->ThreadId,WM_QUIT,Success,0);
|
|
}
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_INFO_LEVEL,
|
|
"SETUP: Leaving Security Block. \n"));
|
|
|
|
return(Success);
|
|
}
|
|
|
|
|
|
BOOL
|
|
SetupInstallSecurity(
|
|
IN HWND Window,
|
|
IN HWND ProgressWindow,
|
|
IN ULONG StartAtPercent,
|
|
IN ULONG StopAtPercent
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
Implement Security at start of GUI Setup.
|
|
|
|
Arguments:
|
|
|
|
Window - supplies window handle for Window that is to be the
|
|
parent/owner for any dialogs that are created, etc.
|
|
|
|
ProgressWindow - supplies window handle of progress bar Window
|
|
common control. This routine manages the progress bar.
|
|
|
|
StartAtPercent - Position where the progress window should start (0% to 100%).
|
|
|
|
StopAtPercent - Maximum position where the progress window can be moved to (0% to 100%).
|
|
|
|
|
|
Return Value:
|
|
|
|
Boolean value indicating whether all operations completed successfully.
|
|
|
|
--*/
|
|
{
|
|
DWORD ThreadId;
|
|
HANDLE ThreadHandle = NULL;
|
|
MSG msg;
|
|
SYSSEC_THREAD_PARAMS Context;
|
|
BOOL Success;
|
|
|
|
|
|
|
|
|
|
|
|
Context.ThreadId = GetCurrentThreadId();
|
|
Context.Window = Window;
|
|
Context.Sec_StartAtPercent = StartAtPercent;
|
|
Context.Sec_StopAtPercent = StopAtPercent;
|
|
Context.SendWmQuit = TRUE;
|
|
Context.ProgressWindow = ProgressWindow;
|
|
|
|
ThreadHandle = CreateThread(
|
|
NULL,
|
|
0,
|
|
pSetupInstallSecurity,
|
|
&Context,
|
|
0,
|
|
&ThreadId
|
|
);
|
|
if (ThreadHandle) {
|
|
|
|
CloseHandle(ThreadHandle);
|
|
|
|
//
|
|
// Pump the message queue and wait for the thread to finish.
|
|
//
|
|
do {
|
|
GetMessage(&msg,NULL,0,0);
|
|
if (msg.message != WM_QUIT) {
|
|
DispatchMessage(&msg);
|
|
}
|
|
} while (msg.message != WM_QUIT);
|
|
|
|
Success = (BOOL)msg.wParam;
|
|
|
|
} else {
|
|
//
|
|
// Just do it synchronously.
|
|
//
|
|
Context.SendWmQuit = FALSE;
|
|
Success = pSetupInstallSecurity(&Context);
|
|
}
|
|
|
|
return(Success);
|
|
|
|
|
|
|
|
}
|
|
|
|
BOOL
|
|
SetupSecurityGaugeUpdate(
|
|
IN HWND Window,
|
|
IN UINT NotificationCode,
|
|
IN UINT NotificationSpecificValue,
|
|
IN LPARAM lParam )
|
|
{
|
|
SendMessage(Window,PBM_STEPIT,0,0);
|
|
return( TRUE );
|
|
}
|
|
|
|
|
|
VOID
|
|
CallSceGenerateTemplate( VOID )
|
|
{
|
|
|
|
HINSTANCE Dll_Handle;
|
|
FARPROC SceCall;
|
|
|
|
try{
|
|
|
|
|
|
if ( (Dll_Handle = LoadLibrary( L"scecli.dll" )) &&
|
|
(SceCall = GetProcAddress(Dll_Handle,"SceSetupBackupSecurity")) ) {
|
|
|
|
// We don't log errors for this call
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_INFO_LEVEL,
|
|
"SETUP: SCE Generating Security Template. \n"));
|
|
|
|
SceCall( NULL );
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_INFO_LEVEL,
|
|
"SETUP: SCE Generating Security Template. Done ! \n"));
|
|
|
|
FreeLibrary( Dll_Handle );
|
|
|
|
} else {
|
|
|
|
if ( Dll_Handle )
|
|
FreeLibrary(Dll_Handle);
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_WARNING_LEVEL,
|
|
"SETUP: Error while loading SCE\n"));
|
|
|
|
|
|
SetuplogError(
|
|
LogSevError,
|
|
SETUPLOG_USE_MESSAGEID,
|
|
MSG_LOG_LOAD_SECURITY_LIBRARY_FAILED,NULL,NULL);
|
|
|
|
|
|
}
|
|
} except(EXCEPTION_EXECUTE_HANDLER) {
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_WARNING_LEVEL,
|
|
"SETUP: Exception in SCE while generating security template (non-critical) \n"));
|
|
|
|
SetuplogError(
|
|
LogSevError,
|
|
SETUPLOG_USE_MESSAGEID,
|
|
MSG_LOG_SCE_EXCEPTION,NULL,NULL);
|
|
|
|
}
|
|
|
|
return;
|
|
}
|
|
|
|
VOID
|
|
CallSceConfigureServices( VOID )
|
|
{
|
|
|
|
HINSTANCE Dll_Handle;
|
|
FARPROC SceCall;
|
|
|
|
try{
|
|
|
|
|
|
if ( (Dll_Handle = LoadLibrary( L"scecli.dll" )) &&
|
|
(SceCall = GetProcAddress(Dll_Handle,"SceSetupConfigureServices")) ) {
|
|
|
|
// We don't log errors for this call
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_INFO_LEVEL,
|
|
"SETUP: SCE Configuring services. \n"));
|
|
|
|
SceCall( ProductType );
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_INFO_LEVEL,
|
|
"SETUP: SCE Configuring services. Done ! \n"));
|
|
|
|
FreeLibrary( Dll_Handle );
|
|
|
|
} else {
|
|
|
|
if ( Dll_Handle )
|
|
FreeLibrary(Dll_Handle);
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_WARNING_LEVEL,
|
|
"SETUP: Error while loading SCE\n"));
|
|
|
|
|
|
SetuplogError(
|
|
LogSevError,
|
|
SETUPLOG_USE_MESSAGEID,
|
|
MSG_LOG_LOAD_SECURITY_LIBRARY_FAILED,NULL,NULL);
|
|
|
|
|
|
}
|
|
} except(EXCEPTION_EXECUTE_HANDLER) {
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_WARNING_LEVEL,
|
|
"SETUP: Exception in SCE while configuring services (non-critical) \n"));
|
|
|
|
SetuplogError(
|
|
LogSevError,
|
|
SETUPLOG_USE_MESSAGEID,
|
|
MSG_LOG_SCE_EXCEPTION,NULL,NULL);
|
|
|
|
}
|
|
|
|
return;
|
|
}
|
|
|
|
|
|
DWORD
|
|
pSceSetupRootSecurity(
|
|
IN PVOID ThreadParam
|
|
)
|
|
{
|
|
|
|
HINSTANCE Dll_Handle;
|
|
FARPROC SceCall;
|
|
BOOL Success = FALSE;
|
|
|
|
try{
|
|
|
|
|
|
if ( (Dll_Handle = LoadLibrary( L"scecli.dll" )) &&
|
|
(SceCall = GetProcAddress(Dll_Handle,"SceSetupRootSecurity")) ) {
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_INFO_LEVEL,
|
|
"SETUP: SCE Setup root security. \n"));
|
|
|
|
BEGIN_SECTION(L"SceSetupRootSecurity");
|
|
SceCall();
|
|
Success = TRUE;
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_INFO_LEVEL,
|
|
"SETUP: SCE Setup root security. Done ! \n"));
|
|
|
|
bSceSetupRootSecurityComplete = TRUE;
|
|
END_SECTION(L"SceSetupRootSecurity");
|
|
|
|
FreeLibrary( Dll_Handle );
|
|
|
|
} else {
|
|
|
|
if ( Dll_Handle )
|
|
FreeLibrary(Dll_Handle);
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_WARNING_LEVEL,
|
|
"SETUP: Error while loading SCE\n"));
|
|
|
|
|
|
SetuplogError(
|
|
LogSevError,
|
|
SETUPLOG_USE_MESSAGEID,
|
|
MSG_LOG_LOAD_SECURITY_LIBRARY_FAILED,NULL,NULL);
|
|
|
|
|
|
}
|
|
} except(EXCEPTION_EXECUTE_HANDLER) {
|
|
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_WARNING_LEVEL,
|
|
"SETUP: Exception in SCE while setting root security (non-critical) \n"));
|
|
|
|
SetuplogError(
|
|
LogSevError,
|
|
SETUPLOG_USE_MESSAGEID,
|
|
MSG_LOG_SCE_EXCEPTION,NULL,NULL);
|
|
|
|
}
|
|
|
|
return( Success);
|
|
}
|
|
|
|
VOID
|
|
CallSceSetupRootSecurity( VOID )
|
|
{
|
|
DWORD ThreadId;
|
|
|
|
SceSetupRootSecurityThreadHandle = CreateThread(
|
|
NULL,
|
|
0,
|
|
pSceSetupRootSecurity,
|
|
0,
|
|
0,
|
|
&ThreadId
|
|
);
|
|
if ( !SceSetupRootSecurityThreadHandle) {
|
|
KdPrintEx((DPFLTR_SETUP_ID,
|
|
DPFLTR_WARNING_LEVEL,
|
|
"SETUP: SCE Could not start thread to setup root security(non-critical) \n"));
|
|
|
|
SetuplogError(
|
|
LogSevError,
|
|
SETUPLOG_USE_MESSAGEID,
|
|
MSG_LOG_SCE_EXCEPTION,NULL,NULL);
|
|
}
|
|
|
|
return;
|
|
}
|
|
|