GitHubMirror/go-winio
1
0
Fork 0
mirror of https://github.com/rwinkhart/go-winio.git synced 2026-09-03 23:57:38 -04:00
Code Issues Packages Projects Releases Wiki Activity

Add DisableProcessPrivileges

Browse Source 
Signed-off-by: John Howard <jhoward@microsoft.com>
This commit is contained in:
John Howard
2016-11-02 16:44:36 -07:00
parent ce2922f643
commit e43ad798e3
1 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
privilege.go
+13 -4
View File
@@ -83,7 +83,7 @@ func RunWithPrivileges(names []string, fn func() error) error {
return err return err
} }
defer releaseThreadToken(token) defer releaseThreadToken(token)
err = adjustPrivileges(token, privileges) err = adjustPrivileges(token, privileges, SE_PRIVILEGE_ENABLED)
if err != nil { if err != nil {
return err return err
} }
@@ -110,6 +110,15 @@ func mapPrivileges(names []string) ([]uint64, error) {
// EnableProcessPrivileges enables privileges globally for the process. // EnableProcessPrivileges enables privileges globally for the process.
func EnableProcessPrivileges(names []string) error { func EnableProcessPrivileges(names []string) error {
return enableDisableProcessPrivilege(names, SE_PRIVILEGE_ENABLED)
}
// DisableProcessPrivileges disables privileges globally for the process.
func DisableProcessPrivileges(names []string) error {
return enableDisableProcessPrivilege(names, 0)
}
func enableDisableProcessPrivilege(names []string, action uint32) error {
privileges, err := mapPrivileges(names) privileges, err := mapPrivileges(names)
if err != nil { if err != nil {
return err return err
@@ -123,15 +132,15 @@ func EnableProcessPrivileges(names []string) error {
} }
defer token.Close() defer token.Close()
return adjustPrivileges(token, privileges) return adjustPrivileges(token, privileges, action)
} }
func adjustPrivileges(token windows.Token, privileges []uint64) error { func adjustPrivileges(token windows.Token, privileges []uint64, action uint32) error {
var b bytes.Buffer var b bytes.Buffer
binary.Write(&b, binary.LittleEndian, uint32(len(privileges))) binary.Write(&b, binary.LittleEndian, uint32(len(privileges)))
for _, p := range privileges { for _, p := range privileges {
binary.Write(&b, binary.LittleEndian, p) binary.Write(&b, binary.LittleEndian, p)
binary.Write(&b, binary.LittleEndian, uint32(SE_PRIVILEGE_ENABLED)) binary.Write(&b, binary.LittleEndian, action)
} }
prevState := make([]byte, b.Len()) prevState := make([]byte, b.Len())
reqSize := uint32(0) reqSize := uint32(0)