trustbridge: cinst/nssstore

comparison cinst/nssstore_win.c @ 670:175370634226

Move getProcessOwner to util and use it to skip the current user in locate other hives

author	Andre Heinecke <andre.heinecke@intevation.de>
date	Fri, 27 Jun 2014 10:27:08 +0200
parents	ef6d3dc9e930
children	d4766b4922c9

comparison

equal deleted inserted replaced

-:7147550ee15d
+:175370634226
 process on login to make sure it is launched once in the
 security context of that user.
 */
 #include <windows.h>
+#include <sddl.h>
 #include <stdio.h>
 #include <stdbool.h>
 #include <userenv.h>
 #include <io.h>
 #include <accctrl.h>
 /* According to
 http://msdn.microsoft.com/en-us/library/windows/desktop/ms724872%28v=vs.85%29.aspx
 a registry key is limited to 255 characters. But according to
 http://www.sepago.de/e/holger/2010/07/20/how-long-can-a-registry-key-name-really-be
 the actual limit is 256 + \0 thus we create a buffer for 257 wchar_t's*/
-wchar_t key_name[257];
+wchar_t key_name[257],
+*current_user_sid = NULL;
 char **retval = NULL;
 bool error = true;
+PSID current_user = NULL;
 ret = RegOpenKeyExW (HKEY_LOCAL_MACHINE, PROFILE_LIST, 0,
 KEY_READ, &profile_list);
 if (ret != ERROR_SUCCESS)
 {
 ERRORPRINTF ("Failed to open profile list. Error: %i", ret);
 return NULL;
 }
+/* Obtain the current user sid to prevent it from being returned. */
+current_user = get_process_owner (GetCurrentProcess());
+if (!current_user)
+{
+ERRORPRINTF ("Failed to get the current user.");
+goto done;
+}
+if (!ConvertSidToStringSidW (current_user, &current_user_sid))
+{
+PRINTLASTERROR ("Failed to convert sid to string.");
+goto done;
+}
 while ((ret = RegEnumKeyExW (profile_list, index++,
 key_name, &key_len,
 NULL, NULL, NULL, NULL)) == ERROR_SUCCESS)
 {
 if (key_len == 257)
 {
 ERRORPRINTF ("Registry key too long.");
 goto done;
 }
-DEBUGPRINTF ("Key : %S", key_name);
 /* Reset key_len to buffer size */
 key_len = 257;
-if (wcsncmp (L"S-1-5-21-", key_name, 9) != 0)
+if (wcsncmp (L"S-1-5-21-", key_name, 9) != 0 ||
-{
+wcscmp (current_user_sid, key_name) == 0)
-/* S-1-5-21 is the well known prefix for local users. Skip all others */
+{
+/* S-1-5-21 is the well known prefix for local users. Skip all
+others and the current user*/
 continue;
 }
+DEBUGPRINTF ("Key : %S", key_name);
 }
 if (ret != ERROR_NO_MORE_ITEMS)
 {
 ERRORPRINTF ("Failed to enumeratre profile list. Error: %i", ret);
 goto done;
 }
 done:
+xfree (current_user);
 RegCloseKey (profile_list);
+if (current_user_sid)
+{
+LocalFree (current_user_sid);
+}
 if (error)
 {
 strv_free (retval);
 retval = NULL;

Mercurial > trustbridge

comparison cinst/nssstore_win.c @ 670:175370634226