Home Explore Help
Register Sign In
wzj
/
Sources_For_Win
1
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Tree: 3952626ba1
Branches Tags
Sources_For_...
/
ParaView
/
Lib
/
site-packages
/
win32
/
Demos
/
security
/
setuserobjectsecurity.py

setuserobjectsecurity.py 2.9 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142 
  1. import win32security,win32api,win32con, win32process
    2. 

  2. new_privs = ((win32security.LookupPrivilegeValue('',win32security.SE_SECURITY_NAME),win32con.SE_PRIVILEGE_ENABLED),
    3. 

  3.              (win32security.LookupPrivilegeValue('',win32security.SE_TCB_NAME),win32con.SE_PRIVILEGE_ENABLED),
    4. 

  4.              (win32security.LookupPrivilegeValue('',win32security.SE_SHUTDOWN_NAME),win32con.SE_PRIVILEGE_ENABLED),
    5. 

  5.              (win32security.LookupPrivilegeValue('',win32security.SE_RESTORE_NAME),win32con.SE_PRIVILEGE_ENABLED),
    6. 

  6.              (win32security.LookupPrivilegeValue('',win32security.SE_TAKE_OWNERSHIP_NAME),win32con.SE_PRIVILEGE_ENABLED),
    7. 

  7.              (win32security.LookupPrivilegeValue('',win32security.SE_CREATE_PERMANENT_NAME),win32con.SE_PRIVILEGE_ENABLED),
    8. 

  8.              (win32security.LookupPrivilegeValue('',win32security.SE_ENABLE_DELEGATION_NAME),win32con.SE_PRIVILEGE_ENABLED),
    9. 

  9.              (win32security.LookupPrivilegeValue('',win32security.SE_CHANGE_NOTIFY_NAME),win32con.SE_PRIVILEGE_ENABLED),
    10. 

  10.              (win32security.LookupPrivilegeValue('',win32security.SE_DEBUG_NAME),win32con.SE_PRIVILEGE_ENABLED),
    11. 

  11.              (win32security.LookupPrivilegeValue('',win32security.SE_PROF_SINGLE_PROCESS_NAME),win32con.SE_PRIVILEGE_ENABLED),
    12. 

  12.              (win32security.LookupPrivilegeValue('',win32security.SE_SYSTEM_PROFILE_NAME),win32con.SE_PRIVILEGE_ENABLED),
    13. 

  13.              (win32security.LookupPrivilegeValue('',win32security.SE_LOCK_MEMORY_NAME),win32con.SE_PRIVILEGE_ENABLED)
    14. 

  14.             )
    15. 

  15. 

  16. all_info=win32security.OWNER_SECURITY_INFORMATION|win32security.GROUP_SECURITY_INFORMATION| \
    17. 

  17.      win32security.DACL_SECURITY_INFORMATION|win32security.SACL_SECURITY_INFORMATION
    18. 

  18. info=win32security.OWNER_SECURITY_INFORMATION|win32security.GROUP_SECURITY_INFORMATION|win32security.DACL_SECURITY_INFORMATION
    19. 

  19. 

  20. ph=win32process.GetCurrentProcess()
    21. 

  21. th = win32security.OpenProcessToken(ph,win32security.TOKEN_ALL_ACCESS)  ##win32con.TOKEN_ADJUST_PRIVILEGES)
    22. 

  22. win32security.AdjustTokenPrivileges(th,0,new_privs)
    23. 

  23. my_sid = win32security.GetTokenInformation(th,win32security.TokenUser)[0]
    24. 

  24. pwr_sid=win32security.LookupAccountName('','Power Users')[0]
    25. 

  25. 

  26. h=win32process.GetProcessWindowStation()
    27. 

  27. sd=win32security.GetUserObjectSecurity(h,info)
    28. 

  28. dacl=sd.GetSecurityDescriptorDacl()
    29. 

  29. ace_cnt=dacl.GetAceCount()
    30. 

  30. 

  31. dacl.AddAccessAllowedAce(dacl.GetAclRevision(),win32con.ACCESS_SYSTEM_SECURITY|win32con.WRITE_DAC,my_sid)
    32. 

  32. sd.SetSecurityDescriptorDacl(1,dacl,0)
    33. 

  33. sd.SetSecurityDescriptorGroup(pwr_sid,0)
    34. 

  34. sd.SetSecurityDescriptorOwner(pwr_sid,0)
    35. 

  35. 

  36. win32security.SetUserObjectSecurity(h,info,sd)
    37. 

  37. new_sd=win32security.GetUserObjectSecurity(h,info)
    38. 

  38. assert new_sd.GetSecurityDescriptorDacl().GetAceCount()==ace_cnt+1,'Did not add an ace to the Dacl !!!!!!'
    39. 

  39. assert win32security.LookupAccountSid('',new_sd.GetSecurityDescriptorOwner())[0]=='Power Users','Owner not successfully set to Power Users !!!!!'
    40. 

  40. assert win32security.LookupAccountSid('',new_sd.GetSecurityDescriptorGroup())[0]=='Power Users','Group not successfully set to Power Users !!!!!'
    41. 

  41. 

  42.