You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
197 lines
5.9 KiB
197 lines
5.9 KiB
extern "C"
|
|
{
|
|
#include <nt.h>
|
|
#include <ntrtl.h>
|
|
#include <nturtl.h>
|
|
}
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <windows.h>
|
|
|
|
//+----------------------------------------------------------------------------
|
|
ULONG GetAcl(WCHAR *filename, WCHAR *outfile);
|
|
//+----------------------------------------------------------------------------
|
|
#define RESULTS(a) if (fdebug & 1) {printf a;}
|
|
#define VERBOSE(a) if (fdebug & 2) {printf a;}
|
|
|
|
//+----------------------------------------------------------------------------
|
|
VOID Usage()
|
|
{
|
|
printf("USAGE veracl <filename> [/d] [name permission[...]]\n");
|
|
}
|
|
//+----------------------------------------------------------------------------
|
|
ULONG fdebug;
|
|
|
|
VOID _cdecl main(INT argc, char *argv[])
|
|
{
|
|
if ( (argc < 2) ||
|
|
( (argc > 2) && ( (argv[2][0] != '/') && ((argc % 2) != 0) ) ) )
|
|
{
|
|
Usage();
|
|
exit(1);
|
|
} else if ((argc > 2) && (argv[2][0] == '/') )
|
|
{
|
|
if (0 == _stricmp(&argv[2][1],"r") )
|
|
{
|
|
fdebug = 1;
|
|
} else if (0 == _stricmp(&argv[2][1],"d") )
|
|
{
|
|
fdebug = 2;
|
|
} else
|
|
{
|
|
Usage();
|
|
exit(1);
|
|
}
|
|
} else
|
|
{
|
|
fdebug = 0;
|
|
}
|
|
|
|
ULONG ret;
|
|
CHAR db[1024];
|
|
FILE *pf;
|
|
|
|
WCHAR wch[256];
|
|
WCHAR *pwch;
|
|
CHAR *pch;
|
|
|
|
for ( pwch = wch, pch = argv[1]; *pwch = (WCHAR)(*pch);pwch++,pch++);
|
|
|
|
if ( ERROR_SUCCESS == (ret = GetAcl(wch, L"DinkWink.cmp")))
|
|
{
|
|
if (NULL != (pf = fopen("DinkWink.cmp","r")))
|
|
{
|
|
CHAR *ptok = NULL;
|
|
for (int k = fdebug ? 3 : 2; k < argc; k+=2)
|
|
{
|
|
if (NULL != fgets(db,1024, pf))
|
|
{
|
|
VERBOSE(("GetAcl returned: %s[%d]\n",db,k))
|
|
|
|
if (k <= 3)
|
|
{
|
|
if ( NULL == ( ptok = strtok(db, " ")))
|
|
{
|
|
VERBOSE(("no file name found\n"))
|
|
ret = ERROR_INVALID_DATA;
|
|
break;
|
|
}
|
|
VERBOSE(("ptok (1st) [%s]\n",ptok))
|
|
}
|
|
if (NULL != ( ptok = strtok(k <= 3 ? NULL : db, ":\n")))
|
|
{
|
|
// this ugly little mess should strip off the leading spaces
|
|
for (; *ptok == ' ';ptok++);
|
|
|
|
VERBOSE(("ptok (2nd) [%s]\n",ptok))
|
|
if (0 == _stricmp(ptok, argv[k]))
|
|
{
|
|
if (NULL != (ptok = strtok(NULL, " ")))
|
|
{
|
|
VERBOSE(("ptok (3rd) [%s]\n",ptok))
|
|
if ((argc <= k) || (0 != _stricmp(ptok, argv[k+1])))
|
|
{
|
|
VERBOSE(("mismatch type %s != %s\n",ptok))
|
|
ret = ERROR_INVALID_DATA;
|
|
break;
|
|
}
|
|
} else
|
|
{
|
|
VERBOSE(("access type not found in\n"))
|
|
ret = ERROR_INVALID_DATA;
|
|
break;
|
|
}
|
|
} else
|
|
{
|
|
VERBOSE(("mismatch %s != %s\n",ptok, argv[k]))
|
|
ret = ERROR_INVALID_DATA;
|
|
break;
|
|
}
|
|
} else
|
|
{
|
|
VERBOSE((": not found in CACLs output\n"))
|
|
ret = ERROR_INVALID_DATA;
|
|
break;
|
|
}
|
|
} else
|
|
{
|
|
VERBOSE(("End of CACLs output\n"))
|
|
ret = ERROR_INVALID_DATA;
|
|
break;
|
|
}
|
|
}
|
|
if (k != argc)
|
|
{
|
|
VERBOSE(("not all name:permissions found on file\n"))
|
|
for (int j = k; j < argc ;j+=2 )
|
|
VERBOSE((" %s:%s\n",argv[j], argv[j+1]))
|
|
ret = ERROR_INVALID_DATA;
|
|
|
|
}
|
|
fclose(pf);
|
|
} else
|
|
{
|
|
ret = GetLastError();
|
|
VERBOSE(("fopen failed, %ld\n", ret))
|
|
}
|
|
DeleteFile(L"DinkWink.cmp");
|
|
} else
|
|
{
|
|
VERBOSE(("GetAcl failed, %ld\n", ret))
|
|
}
|
|
if (ret == ERROR_SUCCESS)
|
|
{
|
|
RESULTS(("PASSED\n"))
|
|
}
|
|
else
|
|
{
|
|
RESULTS(("FAILED\n"))
|
|
}
|
|
exit(ret);
|
|
}
|
|
//+----------------------------------------------------------------------------
|
|
ULONG GetAcl(WCHAR *filename, WCHAR *outfile)
|
|
{
|
|
|
|
ULONG ret = ERROR_SUCCESS;
|
|
WCHAR cmdline[1024];
|
|
|
|
wsprintf(cmdline, L"cmd /c CACLS.EXE %ws > %ws",
|
|
filename,
|
|
outfile);
|
|
|
|
VERBOSE(("CMD: %ws\n",cmdline))
|
|
|
|
STARTUPINFO sui;
|
|
memset(&sui,0,sizeof(STARTUPINFO));
|
|
sui.cb = sizeof(STARTUPINFO);
|
|
|
|
PROCESS_INFORMATION pi;
|
|
|
|
if (CreateProcess(NULL,
|
|
cmdline,
|
|
NULL,
|
|
NULL,
|
|
TRUE,
|
|
NORMAL_PRIORITY_CLASS,
|
|
NULL,
|
|
NULL,
|
|
&sui,
|
|
&pi))
|
|
{
|
|
ULONG ec;
|
|
CloseHandle(pi.hThread);
|
|
DWORD dw = WaitForSingleObject(pi.hProcess, INFINITE);
|
|
|
|
if (!GetExitCodeProcess(pi.hProcess, &ec))
|
|
ret = GetLastError();
|
|
|
|
CloseHandle(pi.hProcess);
|
|
if (ret == ERROR_SUCCESS)
|
|
ret = ec;
|
|
} else
|
|
ret = GetLastError();
|
|
|
|
return(ret);
|
|
}
|
|
|