| OLD | NEW |
| (Empty) |
| 1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #include "sandbox/src/restricted_token.h" | |
| 6 #include "sandbox/src/restricted_token_utils.h" | |
| 7 #include "sandbox/tools/finder/finder.h" | |
| 8 | |
| 9 Finder::Finder() { | |
| 10 file_output_ = NULL; | |
| 11 object_type_ = 0; | |
| 12 access_type_ = 0; | |
| 13 token_handle_ = NULL; | |
| 14 memset(filesystem_stats_, 0, sizeof(filesystem_stats_)); | |
| 15 memset(registry_stats_, 0, sizeof(registry_stats_)); | |
| 16 memset(kernel_object_stats_, 0, sizeof(kernel_object_stats_)); | |
| 17 } | |
| 18 | |
| 19 Finder::~Finder() { | |
| 20 if (token_handle_) | |
| 21 ::CloseHandle(token_handle_); | |
| 22 } | |
| 23 | |
| 24 DWORD Finder::Init(sandbox::TokenLevel token_type, | |
| 25 DWORD object_type, | |
| 26 DWORD access_type, | |
| 27 FILE *file_output) { | |
| 28 DWORD err_code = ERROR_SUCCESS; | |
| 29 | |
| 30 err_code = InitNT(); | |
| 31 if (ERROR_SUCCESS != err_code) | |
| 32 return err_code; | |
| 33 | |
| 34 object_type_ = object_type; | |
| 35 access_type_ = access_type; | |
| 36 file_output_ = file_output; | |
| 37 | |
| 38 err_code = sandbox::CreateRestrictedToken(&token_handle_, token_type, | |
| 39 sandbox::INTEGRITY_LEVEL_LAST, | |
| 40 sandbox::PRIMARY); | |
| 41 return err_code; | |
| 42 } | |
| 43 | |
| 44 DWORD Finder::Scan() { | |
| 45 if (!token_handle_) { | |
| 46 return ERROR_NO_TOKEN; | |
| 47 } | |
| 48 | |
| 49 if (object_type_ & kScanRegistry) { | |
| 50 ParseRegistry(HKEY_LOCAL_MACHINE, L"HKLM\\"); | |
| 51 ParseRegistry(HKEY_USERS, L"HKU\\"); | |
| 52 ParseRegistry(HKEY_CURRENT_CONFIG, L"HKCC\\"); | |
| 53 } | |
| 54 | |
| 55 if (object_type_ & kScanFileSystem) { | |
| 56 ParseFileSystem(L"\\\\?\\C:"); | |
| 57 } | |
| 58 | |
| 59 if (object_type_ & kScanKernelObjects) { | |
| 60 ParseKernelObjects(L"\\"); | |
| 61 } | |
| 62 | |
| 63 return ERROR_SUCCESS; | |
| 64 } | |
| OLD | NEW |