More from kernel32 & advapi32

src/AdvApi32.Desktop/AdvApi32+SECURITY_INFORMATION.cs

@@ -0,0 +1,81 @@
+// Copyright (c) to owners found in https://github.com/AArnott/pinvoke/blob/master/COPYRIGHT.md. All rights reserved.
+// Licensed under the MIT license. See LICENSE.txt file in the project root for full license information.
+
+namespace PInvoke
+{
+ using System;
+
+ /// <content>
+ /// Contains the <see cref="SECURITY_INFORMATION"/> nested type.
+ /// </content>
+ public partial class AdvApi32
+ {
+ /// <summary>
+ /// Identifies the object-related security information being set or queried.
+ /// </summary>
+ [Flags]
+ public enum SECURITY_INFORMATION
+ {
+ /// <summary>
+ /// The resource properties of the object being referenced. The resource properties are stored in
+ /// SYSTEM_RESOURCE_ATTRIBUTE_ACE types in the SACL of the security descriptor.
+ /// </summary>
+ /// <remarks>
+ /// Windows Server 2008 R2, Windows 7, Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP:
+ /// This bit flag is not available.
+ /// </remarks>
+ ATTRIBUTE_SECURITY_INFORMATION,
+
+ /// <summary>
+ /// All parts of the security descriptor. This is useful for backup and restore software that needs to preserve
+ /// the entire security descriptor.
+ /// </summary>
+ /// <remarks>
+ /// Windows Server 2008 R2, Windows 7, Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP:
+ /// This bit flag is not available.
+ /// </remarks>
+ BACKUP_SECURITY_INFORMATION,
+
+ /// <summary>The DACL of the object is being referenced.</summary>
+ DACL_SECURITY_INFORMATION,
+
+ /// <summary>The primary group identifier of the object is being referenced.</summary>
+ GROUP_SECURITY_INFORMATION,
+
+ /// <summary>
+ /// The mandatory integrity label is being referenced. The mandatory integrity label is an ACE in the SACL of the
+ /// object.
+ /// </summary>
+ /// <remarks>Windows Server 2003 and Windows XP: This bit flag is not available.</remarks>
+ LABEL_SECURITY_INFORMATION,
+
+ /// <summary>The owner identifier of the object is being referenced.</summary>
+ OWNER_SECURITY_INFORMATION,
+
+ /// <summary>The DACL cannot inherit access control entries (ACEs).</summary>
+ PROTECTED_DACL_SECURITY_INFORMATION,
+
+ /// <summary>The SACL cannot inherit ACEs.</summary>
+ PROTECTED_SACL_SECURITY_INFORMATION,
+
+ /// <summary>The SACL of the object is being referenced.</summary>
+ SACL_SECURITY_INFORMATION,
+
+ /// <summary>
+ /// The Central Access Policy (CAP) identifier applicable on the object that is being referenced. Each CAP
+ /// identifier is stored in a SYSTEM_SCOPED_POLICY_ID_ACE type in the SACL of the SD.
+ /// </summary>
+ /// <remarks>
+ /// Windows Server 2008 R2, Windows 7, Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP:
+ /// This bit flag is not available.
+ /// </remarks>
+ SCOPE_SECURITY_INFORMATION,
+
+ /// <summary>The DACL inherits ACEs from the parent object.</summary>
+ UNPROTECTED_DACL_SECURITY_INFORMATION,
+
+ /// <summary>The SACL inherits ACEs from the parent object.</summary>
+ UNPROTECTED_SACL_SECURITY_INFORMATION
+ }
+ }
+}

src/AdvApi32.Desktop/AdvApi32+TOKEN_ELEVATION_TYPE.cs

@@ -0,0 +1,35 @@
+// Copyright (c) to owners found in https://github.com/AArnott/pinvoke/blob/master/COPYRIGHT.md. All rights reserved.
+// Licensed under the MIT license. See LICENSE.txt file in the project root for full license information.
+
+namespace PInvoke
+{
+ /// <content>
+ /// Contains the <see cref="TOKEN_ELEVATION_TYPE"/> nested type.
+ /// </content>
+ public partial class AdvApi32
+ {
+ /// <summary>
+ /// Indicates the elevation type of token being queried by the <see cref="GetTokenInformation"/> function.
+ /// </summary>
+ public enum TOKEN_ELEVATION_TYPE
+ {
+ /// <summary>
+ /// Standard user that don't require UAC as he doesn't have any elevated attributes in it's
+ /// security token.
+ /// </summary>
+ TokenElevationTypeDefault = 1,
+
+ /// <summary>
+ /// Process executing with full elevated rights, either UAC is disable or the process is
+ /// executing in "Run as administrator" mode.
+ /// </summary>
+ TokenElevationTypeFull,
+
+ /// <summary>
+ /// Process executing under UAC, the current user got some elevated right but they can't
+ /// be used in the process as the token is "split".
+ /// </summary>
+ TokenElevationTypeLimited
+ }
+ }
+}

src/AdvApi32.Desktop/AdvApi32+TOKEN_INFORMATION_CLASS.cs

@@ -0,0 +1,59 @@
+// Copyright (c) to owners found in https://github.com/AArnott/pinvoke/blob/master/COPYRIGHT.md. All rights reserved.
+// Licensed under the MIT license. See LICENSE.txt file in the project root for full license information.
+
+namespace PInvoke
+{
+ /// <content>
+ /// Contains the <see cref="TOKEN_INFORMATION_CLASS"/> nested type.
+ /// </content>
+ public partial class AdvApi32
+ {
+ /// <summary>
+ /// Specify the type of information being assigned to or retrieved from an access token.
+ /// </summary>
+ public enum TOKEN_INFORMATION_CLASS
+ {
+ TokenUser = 1,
+ TokenGroups,
+ TokenPrivileges,
+ TokenOwner,
+ TokenPrimaryGroup,
+ TokenDefaultDacl,
+ TokenSource,
+ TokenType,
+ TokenImpersonationLevel,
+ TokenStatistics,
+ TokenRestrictedSids,
+ TokenSessionId,
+ TokenGroupsAndPrivileges,
+ TokenSessionReference,
+ TokenSandBoxInert,
+ TokenAuditPolicy,
+ TokenOrigin,
+ TokenElevationType,
+ TokenLinkedToken,
+ TokenElevation,
+ TokenHasRestrictions,
+ TokenAccessInformation,
+ TokenVirtualizationAllowed,
+ TokenVirtualizationEnabled,
+ TokenIntegrityLevel,
+ TokenUiAccess,
+ TokenMandatoryPolicy,
+ TokenLogonSid,
+ TokenIsAppContainer,
+ TokenCapabilities,
+ TokenAppContainerSid,
+ TokenAppContainerNumber,
+ TokenUserClaimAttributes,
+ TokenDeviceClaimAttributes,
+ TokenRestrictedUserClaimAttributes,
+ TokenRestrictedDeviceClaimAttributes,
+ TokenDeviceGroups,
+ TokenRestrictedDeviceGroups,
+ TokenSecurityAttributes,
+ TokenIsRestricted,
+ MaxTokenInfoClass
+ }
+ }
+}

src/AdvApi32.Desktop/AdvApi32+TokenAccessRights.cs

@@ -0,0 +1,100 @@
+// Copyright (c) to owners found in https://github.com/AArnott/pinvoke/blob/master/COPYRIGHT.md. All rights reserved.
+// Licensed under the MIT license. See LICENSE.txt file in the project root for full license information.
+
+namespace PInvoke
+{
+ using System;
+
+ /// <content>
+ /// Contains the <see cref="TokenAccessRights"/> nested type.
+ /// </content>
+ public partial class AdvApi32
+ {
+ /// <summary>
+ /// The different access rights allowed to access an access token.
+ /// </summary>
+ [Flags]
+ public enum TokenAccessRights : uint
+ {
+ /// <summary>The right to delete the object.</summary>
+ DELETE = 0x00010000,
+
+ /// <summary>
+ /// The right to read the information in the object's security descriptor, not including the information in the
+ /// system access control list (SACL).
+ /// </summary>
+ READ_CONTROL = 0x00020000,
+
+ /// <summary>The right to modify the discretionary access control list (DACL) in the object's security descriptor.</summary>
+ WRITE_DAC = 0x00040000,
+
+ /// <summary>The right to change the owner in the object's security descriptor.</summary>
+ WRITE_OWNER = 0x00080000,
+
+ /// <summary>Combines DELETE, READ_CONTROL, WRITE_DAC, and WRITE_OWNER access.</summary>
+ STANDARD_RIGHTS_REQUIRED = 0x000F0000,
+
+ /// <summary>Currently defined to equal READ_CONTROL.</summary>
+ STANDARD_RIGHTS_READ = READ_CONTROL,
+
+ /// <summary>Currently defined to equal READ_CONTROL.</summary>
+ STANDARD_RIGHTS_WRITE = READ_CONTROL,
+
+ /// <summary>Currently defined to equal READ_CONTROL.</summary>
+ STANDARD_RIGHTS_EXECUTE = READ_CONTROL,
+
+ /// <summary>
+ /// Required to attach a primary token to a process. The SE_ASSIGNPRIMARYTOKEN_NAME privilege is also required to
+ /// accomplish this task.
+ /// </summary>
+ TOKEN_ASSIGN_PRIMARY = 0x0001,
+
+ /// <summary>Required to duplicate an access token.</summary>
+ TOKEN_DUPLICATE = 0x0002,
+
+ /// <summary>Required to attach an impersonation access token to a process.</summary>
+ TOKEN_IMPERSONATE = 0x0004,
+
+ /// <summary>Required to query an access token.</summary>
+ TOKEN_QUERY = 0x0008,
+
+ /// <summary>Required to query the source of an access token.</summary>
+ TOKEN_QUERY_SOURCE = 0x0010,
+
+ /// <summary>Required to enable or disable the privileges in an access token.</summary>
+ TOKEN_ADJUST_PRIVILEGES = 0x0020,
+
+ /// <summary>Required to adjust the attributes of the groups in an access token.</summary>
+ TOKEN_ADJUST_GROUPS = 0x0040,
+
+ /// <summary>Required to change the default owner, primary group, or DACL of an access token.</summary>
+ TOKEN_ADJUST_DEFAULT = 0x0080,
+
+ /// <summary>Required to adjust the session ID of an access token. The SE_TCB_NAME privilege is required.</summary>
+ TOKEN_ADJUST_SESSIONID = 0x0100,
+
+ /// <summary>Combines STANDARD_RIGHTS_READ and TOKEN_QUERY.</summary>
+ TOKEN_READ = STANDARD_RIGHTS_READ | TOKEN_QUERY,
+
+ /// <summary>Combines STANDARD_RIGHTS_WRITE, TOKEN_ADJUST_PRIVILEGES, TOKEN_ADJUST_GROUPS, and TOKEN_ADJUST_DEFAULT.</summary>
+ TOKEN_WRITE = STANDARD_RIGHTS_WRITE | TOKEN_ADJUST_PRIVILEGES | TOKEN_ADJUST_GROUPS | TOKEN_ADJUST_DEFAULT,
+
+ /// <summary>Required to wait for the process to terminate using the wait functions.</summary>
+ ACCESS_SYSTEM_SECURITY = 0x01000000,
+
+ /// <summary>Combines STANDARD_RIGHTS_EXECUTE and TOKEN_IMPERSONATE.</summary>
+ TOKEN_EXECUTE = STANDARD_RIGHTS_EXECUTE | TOKEN_IMPERSONATE,
+
+ /// <summary>Combines all possible access rights for a token.</summary>
+ TOKEN_ALL_ACCESS = STANDARD_RIGHTS_REQUIRED |
+ TOKEN_ASSIGN_PRIMARY |
+ TOKEN_DUPLICATE |
+ TOKEN_IMPERSONATE |
+ TOKEN_QUERY |
+ TOKEN_QUERY_SOURCE |
+ TOKEN_ADJUST_PRIVILEGES |
+ TOKEN_ADJUST_GROUPS |
+ TOKEN_ADJUST_DEFAULT
+ }
+ }
+}

src/AdvApi32.Desktop/AdvApi32.Desktop.csproj

@@ -39,6 +39,7 @@
  </ItemGroup>
  <ItemGroup>
  <Compile Include="AdvApi32+SafeServiceHandle.cs" />
+ <Compile Include="AdvApi32+SECURITY_INFORMATION.cs" />
  <Compile Include="AdvApi32+ServiceAccess.cs" />
  <Compile Include="AdvApi32+ServicePreferredNodeInfo.cs" />
  <Compile Include="AdvApi32+ServiceLaunchProtectedInfo.cs" />
@@ -57,6 +58,9 @@
  <Compile Include="AdvApi32+ServiceManagerAccess.cs" />
  <Compile Include="AdvApi32+ServiceStartType.cs" />
  <Compile Include="AdvApi32+ServiceType.cs" />
+ <Compile Include="AdvApi32+TokenAccessRights.cs" />
+ <Compile Include="AdvApi32+TOKEN_ELEVATION_TYPE.cs" />
+ <Compile Include="AdvApi32+TOKEN_INFORMATION_CLASS.cs" />
  <Compile Include="AdvApi32.cs" />
  <Compile Include="AdvApi32.Helpers.cs" />
  <Compile Include="AdvApi32+ServiceDelayedAutoStartInfo.cs" />