1 | /**
|
---|
2 | * This file has no copyright assigned and is placed in the Public Domain.
|
---|
3 | * This file is part of the mingw-w64 runtime package.
|
---|
4 | * No warranty is given; refer to the file DISCLAIMER.PD within this package.
|
---|
5 | */
|
---|
6 | #ifndef _WINSAFER_H
|
---|
7 | #define _WINSAFER_H
|
---|
8 |
|
---|
9 | #include <guiddef.h>
|
---|
10 | #include <wincrypt.h>
|
---|
11 |
|
---|
12 | #ifdef __cplusplus
|
---|
13 | extern "C" {
|
---|
14 | #endif
|
---|
15 |
|
---|
16 | DECLARE_HANDLE(SAFER_LEVEL_HANDLE);
|
---|
17 |
|
---|
18 | #define SAFER_SCOPEID_MACHINE 1
|
---|
19 | #define SAFER_SCOPEID_USER 2
|
---|
20 |
|
---|
21 | #define SAFER_LEVELID_FULLYTRUSTED 0x40000
|
---|
22 | #define SAFER_LEVELID_NORMALUSER 0x20000
|
---|
23 | #define SAFER_LEVELID_CONSTRAINED 0x10000
|
---|
24 | #define SAFER_LEVELID_UNTRUSTED 0x01000
|
---|
25 | #define SAFER_LEVELID_DISALLOWED 0x00000
|
---|
26 |
|
---|
27 | #define SAFER_LEVEL_OPEN 1
|
---|
28 |
|
---|
29 | #define SAFER_MAX_FRIENDLYNAME_SIZE 256
|
---|
30 | #define SAFER_MAX_DESCRIPTION_SIZE 256
|
---|
31 | #define SAFER_MAX_HASH_SIZE 64
|
---|
32 |
|
---|
33 | #define SAFER_TOKEN_NULL_IF_EQUAL 0x00000001
|
---|
34 | #define SAFER_TOKEN_COMPARE_ONLY 0x00000002
|
---|
35 | #define SAFER_TOKEN_MAKE_INERT 0x00000004
|
---|
36 | #define SAFER_TOKEN_WANT_FLAGS 0x00000008
|
---|
37 |
|
---|
38 | #define SAFER_CRITERIA_IMAGEPATH 0x00001
|
---|
39 | #define SAFER_CRITERIA_NOSIGNEDHASH 0x00002
|
---|
40 | #define SAFER_CRITERIA_IMAGEHASH 0x00004
|
---|
41 | #define SAFER_CRITERIA_AUTHENTICODE 0x00008
|
---|
42 | #define SAFER_CRITERIA_URLZONE 0x00010
|
---|
43 | #define SAFER_CRITERIA_IMAGEPATH_NT 0x01000
|
---|
44 |
|
---|
45 | #include <pshpack8.h>
|
---|
46 |
|
---|
47 | typedef struct _SAFER_CODE_PROPERTIES {
|
---|
48 | DWORD cbSize;
|
---|
49 | DWORD dwCheckFlags;
|
---|
50 | LPCWSTR ImagePath;
|
---|
51 | HANDLE hImageFileHandle;
|
---|
52 | DWORD UrlZoneId;
|
---|
53 | BYTE ImageHash[SAFER_MAX_HASH_SIZE];
|
---|
54 | DWORD dwImageHashSize;
|
---|
55 | LARGE_INTEGER ImageSize;
|
---|
56 | ALG_ID HashAlgorithm;
|
---|
57 | LPBYTE pByteBlock;
|
---|
58 | HWND hWndParent;
|
---|
59 | DWORD dwWVTUIChoice;
|
---|
60 | } SAFER_CODE_PROPERTIES,*PSAFER_CODE_PROPERTIES;
|
---|
61 |
|
---|
62 | #include <poppack.h>
|
---|
63 |
|
---|
64 | #define SAFER_POLICY_JOBID_MASK 0xFF000000
|
---|
65 | #define SAFER_POLICY_JOBID_CONSTRAINED 0x04000000
|
---|
66 | #define SAFER_POLICY_JOBID_UNTRUSTED 0x03000000
|
---|
67 | #define SAFER_POLICY_ONLY_EXES 0x00010000
|
---|
68 | #define SAFER_POLICY_SANDBOX_INERT 0x00020000
|
---|
69 | #define SAFER_POLICY_HASH_DUPLICATE 0x00040000
|
---|
70 | #define SAFER_POLICY_UIFLAGS_MASK 0x000000FF
|
---|
71 | #define SAFER_POLICY_UIFLAGS_INFORMATION_PROMPT 0x00000001
|
---|
72 | #define SAFER_POLICY_UIFLAGS_OPTION_PROMPT 0x00000002
|
---|
73 | #define SAFER_POLICY_UIFLAGS_HIDDEN 0x00000004
|
---|
74 |
|
---|
75 | typedef enum _SAFER_POLICY_INFO_CLASS {
|
---|
76 | SaferPolicyLevelList = 1,SaferPolicyEnableTransparentEnforcement,SaferPolicyDefaultLevel,SaferPolicyEvaluateUserScope,SaferPolicyScopeFlags
|
---|
77 | } SAFER_POLICY_INFO_CLASS;
|
---|
78 |
|
---|
79 | typedef enum _SAFER_OBJECT_INFO_CLASS {
|
---|
80 | SaferObjectLevelId = 1,SaferObjectScopeId,SaferObjectFriendlyName,SaferObjectDescription,SaferObjectBuiltin,SaferObjectDisallowed,
|
---|
81 | SaferObjectDisableMaxPrivilege,SaferObjectInvertDeletedPrivileges,SaferObjectDeletedPrivileges,SaferObjectDefaultOwner,SaferObjectSidsToDisable,
|
---|
82 | SaferObjectRestrictedSidsInverted,SaferObjectRestrictedSidsAdded,SaferObjectAllIdentificationGuids,SaferObjectSingleIdentification,
|
---|
83 | SaferObjectExtendedError
|
---|
84 | } SAFER_OBJECT_INFO_CLASS;
|
---|
85 |
|
---|
86 | #include <pshpack8.h>
|
---|
87 |
|
---|
88 | typedef enum _SAFER_IDENTIFICATION_TYPES {
|
---|
89 | SaferIdentityDefault,SaferIdentityTypeImageName = 1,SaferIdentityTypeImageHash,SaferIdentityTypeUrlZone,SaferIdentityTypeCertificate
|
---|
90 | } SAFER_IDENTIFICATION_TYPES;
|
---|
91 |
|
---|
92 | typedef struct _SAFER_IDENTIFICATION_HEADER {
|
---|
93 | SAFER_IDENTIFICATION_TYPES dwIdentificationType;
|
---|
94 | DWORD cbStructSize;
|
---|
95 | GUID IdentificationGuid;
|
---|
96 | FILETIME lastModified;
|
---|
97 | } SAFER_IDENTIFICATION_HEADER,*PSAFER_IDENTIFICATION_HEADER;
|
---|
98 |
|
---|
99 | typedef struct _SAFER_PATHNAME_IDENTIFICATION {
|
---|
100 | SAFER_IDENTIFICATION_HEADER header;
|
---|
101 | WCHAR Description[SAFER_MAX_DESCRIPTION_SIZE];
|
---|
102 | PWCHAR ImageName;
|
---|
103 | DWORD dwSaferFlags;
|
---|
104 | } SAFER_PATHNAME_IDENTIFICATION,*PSAFER_PATHNAME_IDENTIFICATION;
|
---|
105 |
|
---|
106 | typedef struct _SAFER_HASH_IDENTIFICATION {
|
---|
107 | SAFER_IDENTIFICATION_HEADER header;
|
---|
108 | WCHAR Description[SAFER_MAX_DESCRIPTION_SIZE];
|
---|
109 | WCHAR FriendlyName[SAFER_MAX_FRIENDLYNAME_SIZE];
|
---|
110 | DWORD HashSize;
|
---|
111 | BYTE ImageHash[SAFER_MAX_HASH_SIZE];
|
---|
112 | ALG_ID HashAlgorithm;
|
---|
113 | LARGE_INTEGER ImageSize;
|
---|
114 | DWORD dwSaferFlags;
|
---|
115 | } SAFER_HASH_IDENTIFICATION,*PSAFER_HASH_IDENTIFICATION;
|
---|
116 |
|
---|
117 | typedef struct _SAFER_URLZONE_IDENTIFICATION {
|
---|
118 | SAFER_IDENTIFICATION_HEADER header;
|
---|
119 | DWORD UrlZoneId;
|
---|
120 | DWORD dwSaferFlags;
|
---|
121 | } SAFER_URLZONE_IDENTIFICATION,*PSAFER_URLZONE_IDENTIFICATION;
|
---|
122 |
|
---|
123 | #include <poppack.h>
|
---|
124 |
|
---|
125 | WINADVAPI WINBOOL WINAPI SaferGetPolicyInformation(DWORD dwScopeId,SAFER_POLICY_INFO_CLASS SaferPolicyInfoClass,DWORD InfoBufferSize,PVOID InfoBuffer,PDWORD InfoBufferRetSize,LPVOID lpReserved);
|
---|
126 | WINADVAPI WINBOOL WINAPI SaferSetPolicyInformation(DWORD dwScopeId,SAFER_POLICY_INFO_CLASS SaferPolicyInfoClass,DWORD InfoBufferSize,PVOID InfoBuffer,LPVOID lpReserved);
|
---|
127 | WINADVAPI WINBOOL WINAPI SaferCreateLevel(DWORD dwScopeId,DWORD dwLevelId,DWORD OpenFlags,SAFER_LEVEL_HANDLE *pLevelHandle,LPVOID lpReserved);
|
---|
128 | WINADVAPI WINBOOL WINAPI SaferCloseLevel(SAFER_LEVEL_HANDLE hLevelHandle);
|
---|
129 | WINADVAPI WINBOOL WINAPI SaferIdentifyLevel(DWORD dwNumProperties,PSAFER_CODE_PROPERTIES pCodeProperties,SAFER_LEVEL_HANDLE *pLevelHandle,LPVOID lpReserved);
|
---|
130 | WINADVAPI WINBOOL WINAPI SaferComputeTokenFromLevel(SAFER_LEVEL_HANDLE LevelHandle,HANDLE InAccessToken,PHANDLE OutAccessToken,DWORD dwFlags,LPVOID lpReserved);
|
---|
131 | WINADVAPI WINBOOL WINAPI SaferGetLevelInformation(SAFER_LEVEL_HANDLE LevelHandle,SAFER_OBJECT_INFO_CLASS dwInfoType,LPVOID lpQueryBuffer,DWORD dwInBufferSize,LPDWORD lpdwOutBufferSize);
|
---|
132 | WINADVAPI WINBOOL WINAPI SaferSetLevelInformation(SAFER_LEVEL_HANDLE LevelHandle,SAFER_OBJECT_INFO_CLASS dwInfoType,LPVOID lpQueryBuffer,DWORD dwInBufferSize);
|
---|
133 | WINADVAPI WINBOOL WINAPI SaferRecordEventLogEntry(SAFER_LEVEL_HANDLE hLevel,LPCWSTR szTargetPath,LPVOID lpReserved);
|
---|
134 | WINADVAPI WINBOOL WINAPI SaferiIsExecutableFileType(LPCWSTR szFullPathname,BOOLEAN bFromShellExecute);
|
---|
135 |
|
---|
136 | #ifdef __cplusplus
|
---|
137 | }
|
---|
138 | #endif
|
---|
139 | #endif
|
---|