361 lines
12 KiB
C++
361 lines
12 KiB
C++
//+---------------------------------------------------------------------------
|
|
//
|
|
// Microsoft Windows
|
|
// Copyright (C) Microsoft Corporation, 2000-2001.
|
|
//
|
|
// File: SaferEnforcementPropertyPage.h
|
|
//
|
|
// Contents: Declaration of CSaferEnforcementPropertyPage
|
|
//
|
|
//----------------------------------------------------------------------------
|
|
// SaferEnforcementPropertyPage.cpp : implementation file
|
|
//
|
|
|
|
#include "stdafx.h"
|
|
#include "certmgr.h"
|
|
#include <gpedit.h>
|
|
#include "compdata.h"
|
|
#include "SaferEnforcementPropertyPage.h"
|
|
|
|
#ifdef _DEBUG
|
|
#define new DEBUG_NEW
|
|
#undef THIS_FILE
|
|
static char THIS_FILE[] = __FILE__;
|
|
#endif
|
|
|
|
extern GUID g_guidExtension;
|
|
extern GUID g_guidRegExt;
|
|
extern GUID g_guidSnapin;
|
|
|
|
/////////////////////////////////////////////////////////////////////////////
|
|
// CSaferEnforcementPropertyPage property page
|
|
|
|
// The "TransparentEnforcement" flag has the following values:
|
|
// 0 = disable all transparent hooks (in CreateProcess and LoadLibrary)
|
|
// 1 = enable transparent hooks for CreateProcess
|
|
// 2 = enable transparent hooks for CreateProcess and LoadLibrary
|
|
#define SAFER_TRANSPARENT_ENFORCEMENT_DISABLE_ALL 0
|
|
#define SAFER_TRANSPARENT_ENFORCEMENT_ENABLE_CREATE_PROCESS 1
|
|
#define SAFER_TRANSPARENT_ENFORCEMENT_ENABLE_ALL 2
|
|
|
|
CSaferEnforcementPropertyPage::CSaferEnforcementPropertyPage(
|
|
IGPEInformation* pGPEInformation,
|
|
CCertMgrComponentData* pCompData,
|
|
bool bReadOnly,
|
|
CRSOPObjectArray& rsopObjectArray,
|
|
bool bIsComputer)
|
|
: CHelpPropertyPage(CSaferEnforcementPropertyPage::IDD),
|
|
m_pGPEInformation (pGPEInformation),
|
|
m_hGroupPolicyKey (0),
|
|
m_fIsComputerType (bIsComputer),
|
|
m_bReadOnly (bReadOnly),
|
|
m_rsopObjectArray (rsopObjectArray),
|
|
m_dwEnforcement (0),
|
|
m_bDirty (false),
|
|
m_dwScopeFlags (0)
|
|
{
|
|
//{{AFX_DATA_INIT(CSaferEnforcementPropertyPage)
|
|
// NOTE: the ClassWizard will add member initialization here
|
|
//}}AFX_DATA_INIT
|
|
if ( m_pGPEInformation )
|
|
{
|
|
m_pGPEInformation->AddRef ();
|
|
HRESULT hr = m_pGPEInformation->GetRegistryKey (
|
|
m_fIsComputerType ? GPO_SECTION_MACHINE : GPO_SECTION_USER,
|
|
&m_hGroupPolicyKey);
|
|
ASSERT (SUCCEEDED (hr));
|
|
if ( SUCCEEDED (hr) )
|
|
{
|
|
DWORD cbBuffer = sizeof (DWORD);
|
|
CPolicyKey policyKey (m_pGPEInformation,
|
|
SAFER_HKLM_REGBASE,
|
|
m_fIsComputerType);
|
|
|
|
SetRegistryScope (policyKey.GetKey (), bIsComputer);
|
|
BOOL bRVal = SaferGetPolicyInformation (
|
|
SAFER_SCOPEID_REGISTRY,
|
|
SaferPolicyEnableTransparentEnforcement,
|
|
cbBuffer,
|
|
&m_dwEnforcement,
|
|
&cbBuffer,
|
|
0);
|
|
if ( !bRVal )
|
|
{
|
|
ASSERT (0);
|
|
DWORD dwErr = GetLastError ();
|
|
hr = HRESULT_FROM_WIN32 (dwErr);
|
|
_TRACE (0, L"SaferGetPolicyInformation (SAFER_SCOPEID_REGISTRY, SaferPolicyEnableTransparentEnforcement) failed: %d\n",
|
|
dwErr);
|
|
}
|
|
|
|
|
|
bRVal = SaferGetPolicyInformation (
|
|
SAFER_SCOPEID_REGISTRY,
|
|
SaferPolicyScopeFlags,
|
|
cbBuffer,
|
|
&m_dwScopeFlags,
|
|
&cbBuffer,
|
|
0);
|
|
if ( !bRVal )
|
|
{
|
|
ASSERT (0);
|
|
DWORD dwErr = GetLastError ();
|
|
hr = HRESULT_FROM_WIN32 (dwErr);
|
|
_TRACE (0, L"SaferGetPolicyInformation (SAFER_SCOPEID_REGISTRY, SaferPolicyScopeFlags) failed: %d\n",
|
|
dwErr);
|
|
}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
RSOPGetEnforcement (pCompData);
|
|
}
|
|
}
|
|
|
|
CSaferEnforcementPropertyPage::~CSaferEnforcementPropertyPage()
|
|
{
|
|
if ( m_hGroupPolicyKey )
|
|
RegCloseKey (m_hGroupPolicyKey);
|
|
|
|
if ( m_pGPEInformation )
|
|
{
|
|
m_pGPEInformation->Release ();
|
|
}
|
|
}
|
|
|
|
void CSaferEnforcementPropertyPage::DoDataExchange(CDataExchange* pDX)
|
|
{
|
|
CHelpPropertyPage::DoDataExchange(pDX);
|
|
//{{AFX_DATA_MAP(CSaferEnforcementPropertyPage)
|
|
// NOTE: the ClassWizard will add DDX and DDV calls here
|
|
//}}AFX_DATA_MAP
|
|
}
|
|
|
|
|
|
BEGIN_MESSAGE_MAP(CSaferEnforcementPropertyPage, CHelpPropertyPage)
|
|
//{{AFX_MSG_MAP(CSaferEnforcementPropertyPage)
|
|
ON_BN_CLICKED(IDC_ALL_EXCEPT_LIBS, OnAllExceptLibs)
|
|
ON_BN_CLICKED(IDC_ALL_SOFTWARE_FILES, OnAllSoftwareFiles)
|
|
ON_BN_CLICKED(IDC_APPLY_EXCEPT_ADMINS, OnApplyExceptAdmins)
|
|
ON_BN_CLICKED(IDC_APPLY_TO_ALL_USERS, OnApplyToAllUsers)
|
|
//}}AFX_MSG_MAP
|
|
END_MESSAGE_MAP()
|
|
|
|
/////////////////////////////////////////////////////////////////////////////
|
|
// CSaferEnforcementPropertyPage message handlers
|
|
void CSaferEnforcementPropertyPage::DoContextHelp (HWND hWndControl)
|
|
{
|
|
_TRACE (1, L"Entering CSaferEnforcementPropertyPage::DoContextHelp\n");
|
|
static const DWORD help_map[] =
|
|
{
|
|
IDC_ALL_EXCEPT_LIBS, IDH_ALL_EXCEPT_LIBS,
|
|
IDC_ALL_SOFTWARE_FILES, IDH_ALL_SOFTWARE_FILES,
|
|
IDC_APPLY_TO_ALL_USERS, IDH_APPLY_TO_ALL_USERS,
|
|
IDC_APPLY_EXCEPT_ADMINS, IDH_APPLY_EXCEPT_ADMINS,
|
|
0, 0
|
|
};
|
|
if ( !::WinHelp (
|
|
hWndControl,
|
|
GetF1HelpFilename(),
|
|
HELP_WM_HELP,
|
|
(DWORD_PTR) help_map) )
|
|
{
|
|
_TRACE (0, L"WinHelp () failed: 0x%x\n", GetLastError ());
|
|
}
|
|
_TRACE (-1, L"Leaving CSaferEnforcementPropertyPage::DoContextHelp\n");
|
|
}
|
|
|
|
void CSaferEnforcementPropertyPage::RSOPGetEnforcement(CCertMgrComponentData* /*pCompData*/)
|
|
{
|
|
int nIndex = 0;
|
|
INT_PTR nUpperBound = m_rsopObjectArray.GetUpperBound ();
|
|
bool bEnforcementFlagFound = false;
|
|
bool bScopeFlagFound = false;
|
|
|
|
while ( nUpperBound >= nIndex )
|
|
{
|
|
CRSOPObject* pObject = m_rsopObjectArray.GetAt (nIndex);
|
|
if ( pObject )
|
|
{
|
|
if ( pObject->GetRegistryKey () == SAFER_HKLM_REGBASE &&
|
|
pObject->GetValueName () == SAFER_TRANSPARENTENABLED_REGVALUE &&
|
|
1 == pObject->GetPrecedence ())
|
|
{
|
|
m_dwEnforcement = pObject->GetDWORDValue ();
|
|
bEnforcementFlagFound = true;
|
|
}
|
|
else if ( pObject->GetRegistryKey () == SAFER_HKLM_REGBASE &&
|
|
pObject->GetValueName () == SAFER_POLICY_SCOPE &&
|
|
1 == pObject->GetPrecedence ())
|
|
{
|
|
m_dwScopeFlags = pObject->GetDWORDValue ();
|
|
bScopeFlagFound = true;
|
|
}
|
|
}
|
|
else
|
|
break;
|
|
|
|
if ( bScopeFlagFound && bEnforcementFlagFound )
|
|
break;
|
|
|
|
nIndex++;
|
|
}
|
|
}
|
|
|
|
void CSaferEnforcementPropertyPage::OnAllExceptLibs()
|
|
{
|
|
SetModified ();
|
|
m_bDirty = true;
|
|
}
|
|
|
|
void CSaferEnforcementPropertyPage::OnAllSoftwareFiles()
|
|
{
|
|
SetModified ();
|
|
m_bDirty = true;
|
|
}
|
|
|
|
BOOL CSaferEnforcementPropertyPage::OnApply()
|
|
{
|
|
_TRACE (1, L"Entering CSaferEnforcementPropertyPage::OnApply ()\n");
|
|
if ( m_bDirty && m_pGPEInformation)
|
|
{
|
|
if ( BST_CHECKED == SendDlgItemMessage (IDC_ALL_EXCEPT_LIBS,
|
|
BM_GETCHECK) )
|
|
{
|
|
m_dwEnforcement = SAFER_TRANSPARENT_ENFORCEMENT_ENABLE_CREATE_PROCESS;
|
|
}
|
|
else if ( BST_CHECKED == SendDlgItemMessage (IDC_ALL_SOFTWARE_FILES,
|
|
BM_GETCHECK) )
|
|
{
|
|
m_dwEnforcement = SAFER_TRANSPARENT_ENFORCEMENT_ENABLE_ALL;
|
|
}
|
|
|
|
if ( BST_CHECKED == SendDlgItemMessage (IDC_APPLY_EXCEPT_ADMINS,
|
|
BM_GETCHECK) )
|
|
{
|
|
m_dwScopeFlags = 1;
|
|
}
|
|
else if ( BST_CHECKED == SendDlgItemMessage (IDC_APPLY_TO_ALL_USERS,
|
|
BM_GETCHECK) )
|
|
{
|
|
m_dwScopeFlags = 0;
|
|
}
|
|
|
|
CPolicyKey policyKey (m_pGPEInformation,
|
|
SAFER_HKLM_REGBASE,
|
|
m_fIsComputerType);
|
|
SetRegistryScope (policyKey.GetKey (), m_fIsComputerType);
|
|
DWORD cbData = sizeof (m_dwEnforcement);
|
|
BOOL bRVal = SaferSetPolicyInformation (SAFER_SCOPEID_REGISTRY,
|
|
SaferPolicyEnableTransparentEnforcement, cbData,
|
|
&m_dwEnforcement, 0);
|
|
if ( bRVal )
|
|
{
|
|
cbData = sizeof (m_dwScopeFlags);
|
|
bRVal = SaferSetPolicyInformation (SAFER_SCOPEID_REGISTRY,
|
|
SaferPolicyScopeFlags, cbData,
|
|
&m_dwScopeFlags, 0);
|
|
if ( bRVal )
|
|
{
|
|
// TRUE means we're changing the machine policy only
|
|
m_pGPEInformation->PolicyChanged (m_fIsComputerType ? TRUE : FALSE,
|
|
TRUE, &g_guidExtension, &g_guidSnapin);
|
|
m_pGPEInformation->PolicyChanged (m_fIsComputerType ? TRUE : FALSE,
|
|
TRUE, &g_guidRegExt, &g_guidSnapin);
|
|
}
|
|
else
|
|
{
|
|
DWORD dwErr = GetLastError ();
|
|
_TRACE (0, L"SaferSetPolicyInformation (SAFER_SCOPEID_REGISTRY, SaferPolicyScopeFlags, %d failed: 0x%x\n",
|
|
m_dwEnforcement, dwErr);
|
|
CString text;
|
|
CString caption;
|
|
CThemeContextActivator activator;
|
|
|
|
VERIFY (caption.LoadString (IDS_SAFER_WINDOWS_NODE_NAME));
|
|
text.FormatMessage (IDS_CAN_SET_SAFER_ENFORCEMENT, GetSystemMessage (dwErr));
|
|
MessageBox (text, caption);
|
|
|
|
return FALSE;
|
|
}
|
|
}
|
|
else
|
|
{
|
|
DWORD dwErr = GetLastError ();
|
|
_TRACE (0, L"SaferSetPolicyInformation (SAFER_SCOPEID_REGISTRY, SaferPolicyEnableTransparentEnforcement, %d failed: 0x%x\n",
|
|
m_dwEnforcement, dwErr);
|
|
CString text;
|
|
CString caption;
|
|
CThemeContextActivator activator;
|
|
|
|
VERIFY (caption.LoadString (IDS_SAFER_WINDOWS_NODE_NAME));
|
|
text.FormatMessage (IDS_CAN_SET_SAFER_ENFORCEMENT, GetSystemMessage (dwErr));
|
|
MessageBox (text, caption);
|
|
|
|
return FALSE;
|
|
}
|
|
|
|
|
|
m_bDirty = false;
|
|
}
|
|
|
|
_TRACE (-1, L"Leaving CSaferEnforcementPropertyPage::OnApply ()\n");
|
|
return CHelpPropertyPage::OnApply();
|
|
}
|
|
|
|
BOOL CSaferEnforcementPropertyPage::OnInitDialog()
|
|
{
|
|
CHelpPropertyPage::OnInitDialog();
|
|
|
|
switch (m_dwEnforcement)
|
|
{
|
|
case SAFER_TRANSPARENT_ENFORCEMENT_DISABLE_ALL:
|
|
break;
|
|
|
|
case SAFER_TRANSPARENT_ENFORCEMENT_ENABLE_CREATE_PROCESS:
|
|
SendDlgItemMessage (IDC_ALL_EXCEPT_LIBS, BM_SETCHECK, BST_CHECKED);
|
|
break;
|
|
|
|
case SAFER_TRANSPARENT_ENFORCEMENT_ENABLE_ALL:
|
|
SendDlgItemMessage (IDC_ALL_SOFTWARE_FILES, BM_SETCHECK, BST_CHECKED);
|
|
break;
|
|
|
|
default:
|
|
ASSERT (0);
|
|
break;
|
|
}
|
|
|
|
if ( 1 == m_dwScopeFlags )
|
|
{
|
|
SendDlgItemMessage (IDC_APPLY_EXCEPT_ADMINS, BM_SETCHECK, BST_CHECKED);
|
|
}
|
|
else
|
|
{
|
|
SendDlgItemMessage (IDC_APPLY_TO_ALL_USERS, BM_SETCHECK, BST_CHECKED);
|
|
}
|
|
|
|
if ( m_bReadOnly )
|
|
{
|
|
GetDlgItem (IDC_ALL_EXCEPT_LIBS)->EnableWindow (FALSE);
|
|
GetDlgItem (IDC_ALL_SOFTWARE_FILES)->EnableWindow (FALSE);
|
|
GetDlgItem (IDC_APPLY_TO_ALL_USERS)->EnableWindow (FALSE);
|
|
GetDlgItem (IDC_APPLY_EXCEPT_ADMINS)->EnableWindow (FALSE);
|
|
}
|
|
|
|
return TRUE; // return TRUE unless you set the focus to a control
|
|
// EXCEPTION: OCX Property Pages should return FALSE
|
|
}
|
|
|
|
|
|
void CSaferEnforcementPropertyPage::OnApplyExceptAdmins()
|
|
{
|
|
SetModified ();
|
|
m_bDirty = true;
|
|
}
|
|
|
|
void CSaferEnforcementPropertyPage::OnApplyToAllUsers()
|
|
{
|
|
SetModified ();
|
|
m_bDirty = true;
|
|
}
|