PureBoard

Code: Alles auswählen

#DACL_SECURITY_INFORMATION = $00000004
#SET_ACCESS                = $00000002
#NO_INHERITANCE            = $8000000B
#HEAP_ZERO_MEMORY          = $00000008

Structure _TRUSTEE
	*pMultipleTrustee;
	MultipleTrusteeOperation.l
	TrusteeForm.l
	TrusteeType.l
	*ptstrName
EndStructure

Structure EXPLICIT_ACCESS
	grfAccessPermissions.l
	grfAccessMode.l
	grfInheritance.l
	Trustee._TRUSTEE
EndStructure

Procedure Modify_DAC(ServiceName.s, AccessGroup.s = "GUEST")
	Protected sStatus.SERVICE_STATUS
	Protected Result, schSCManager, schService
	Protected *psd.SECURITY_DESCRIPTOR, dwBytesNeeded, dwSize, bDaclPresent, *pacl.ACL, bDaclDefaulted
	Protected ea.EXPLICIT_ACCESS, dwError, *pNewAcl.ACL, sd.SECURITY_DESCRIPTOR

	schSCManager = OpenSCManager_(0, 0, #SC_MANAGER_ALL_ACCESS)
	If schSCManager
		schService = OpenService_(schSCManager, @ServiceName, #READ_CONTROL | #WRITE_DAC)
		If schService
			;Get the current security descriptor.

			If QueryServiceObjectSecurity_(schService, #DACL_SECURITY_INFORMATION, @*psd, 0, @dwBytesNeeded) = 0
				If GetLastError_() = #ERROR_INSUFFICIENT_BUFFER
					dwSize = dwBytesNeeded;
					*psd   = AllocateMemory(dwSize)
					If *psd
						Result = QueryServiceObjectSecurity_(schService, #DACL_SECURITY_INFORMATION, *psd, dwSize, @dwBytesNeeded)
					EndIf
				EndIf
			EndIf

			If Result
				Result = 0
				;Get the DACL.
				If GetSecurityDescriptorDacl_(*psd, @bDaclPresent, @*pacl, @bDaclDefaulted)
					;Build the ACE.
					BuildExplicitAccessWithName_(@ea, @AccessGroup, #SERVICE_START | #SERVICE_STOP | #READ_CONTROL | #DELETE, #SET_ACCESS, #NO_INHERITANCE)
					dwError = SetEntriesInAcl_(1, @ea, *pacl, @*pNewAcl)
					If dwError <> #ERROR_SUCCESS
						Debug dwError ;<- 87 = Falscher Parameter!
					Else
						;Initialize a new security descriptor.
						If InitializeSecurityDescriptor_(@sd, #SECURITY_DESCRIPTOR_REVISION)
							;Set the new DACL in the security descriptor.
							If SetSecurityDescriptorDacl_(@sd, #True, *pNewAcl, #False)
								;Set the new DACL For the service object.
								Result = SetServiceObjectSecurity_(schService, #DACL_SECURITY_INFORMATION, @sd)
							EndIf
						EndIf
					EndIf
				EndIf
			EndIf

			If *psd
				FreeMemory(*psd)
			EndIf
			If *NewAcl
				LocalFree_(*NewAcl)
			EndIf

			CloseServiceHandle_(schService)
		EndIf
		CloseServiceHandle_(schSCManager)
	EndIf
	ProcedureReturn Result
EndProcedure

Code: Alles auswählen

dwError = SetEntriesInAcl_(1, @ea, *pacl, @*pNewAcl)

Code: Alles auswählen

#DACL_SECURITY_INFORMATION = $00000004
#SET_ACCESS                = $00000002
;#NO_INHERITANCE            = $8000000B
;#HEAP_ZERO_MEMORY          = $00000008

EnableExplicit

Structure _TRUSTEE
   *pMultipleTrustee;
   MultipleTrusteeOperation.l
   TrusteeForm.l
   TrusteeType.l
   *ptstrName
EndStructure

Structure EXPLICIT_ACCESS
   grfAccessPermissions.l
   grfAccessMode.l
   grfInheritance.l
   Trustee._TRUSTEE
EndStructure

Procedure Modify_DAC(ServiceName.s, user.s = "GUEST")
   Protected *psd.SECURITY_DESCRIPTOR, *pacl.ACL, *pNewAcl.ACL
   Protected ea.EXPLICIT_ACCESS, dwError

        #SE_SERVICE = 2
        Debug GetNamedSecurityInfo_(ServiceName, #SE_SERVICE, #DACL_SECURITY_INFORMATION, 0, 0, @*pacl, 0, @*psd)
        BuildExplicitAccessWithName_(@ea, @user, #SERVICE_START | #SERVICE_STOP | #DELETE | #READ_CONTROL , #SET_ACCESS, 0);#NO_INHERITANCE)
        dwError = SetEntriesInAcl_(1, @ea, *pacl, @*pNewAcl)
        If dwError <> #ERROR_SUCCESS
          Debug dwError ;<- 87 = Falscher Parameter!
        Else
          Debug "OK"
        EndIf
        Debug SetNamedSecurityInfo_(ServiceName, #SE_SERVICE, #DACL_SECURITY_INFORMATION, 0, 0, *pNewAcl, 0)
               
        If *psd
            LocalFree_(*psd)
        EndIf
        If *pNewAcl
            LocalFree_(*pNewAcl)
        EndIf

EndProcedure

Procedure enumServices()
    Protected schSCManager, pcbBytesNeeded.l, lpServicesReturned.l, i
    Protected *mem.ENUM_SERVICE_STATUS
    schSCManager = OpenSCManager_(0, 0, #SC_MANAGER_CONNECT|#SC_MANAGER_ENUMERATE_SERVICE)
    If schSCManager
        Debug schSCManager
    #SERVICE_WIN32 = $30
        EnumServicesStatus_(schSCManager,#SERVICE_WIN32,#SERVICE_STATE_ALL,0,0,@pcbBytesNeeded,@lpServicesReturned,0)
        If pcbBytesNeeded
            *mem = AllocateMemory(pcbBytesNeeded)
            If *mem
                EnumServicesStatus_(schSCManager,#SERVICE_WIN32,#SERVICE_STATE_ALL,*mem,pcbBytesNeeded,@pcbBytesNeeded,@lpServicesReturned,0)
                Debug lpServicesReturned
                If lpServicesReturned
                    For i = 1 To lpServicesReturned
                        Debug PeekS(*mem\lpServiceName)
                        Debug PeekS(*mem\lpDisplayName)
                        Debug *mem\ServiceStatus\dwCurrentState
                        Debug "---"
                        *mem + SizeOf(ENUM_SERVICE_STATUS)
                    Next
                EndIf
            EndIf
        EndIf
    EndIf
EndProcedure



;enumServices()
;Modify_DAC("myService")