OLD | NEW |
(Empty) | |
| 1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. |
| 4 |
| 5 #include "sandbox/win/src/restricted_token.h" |
| 6 #include "sandbox/win/src/restricted_token_utils.h" |
| 7 #include "sandbox/win/tools/finder/finder.h" |
| 8 |
| 9 Finder::Finder() { |
| 10 file_output_ = NULL; |
| 11 object_type_ = 0; |
| 12 access_type_ = 0; |
| 13 memset(filesystem_stats_, 0, sizeof(filesystem_stats_)); |
| 14 memset(registry_stats_, 0, sizeof(registry_stats_)); |
| 15 memset(kernel_object_stats_, 0, sizeof(kernel_object_stats_)); |
| 16 } |
| 17 |
| 18 Finder::~Finder() { |
| 19 } |
| 20 |
| 21 DWORD Finder::Init(sandbox::TokenLevel token_type, |
| 22 DWORD object_type, |
| 23 DWORD access_type, |
| 24 FILE *file_output) { |
| 25 DWORD err_code = ERROR_SUCCESS; |
| 26 |
| 27 err_code = InitNT(); |
| 28 if (ERROR_SUCCESS != err_code) |
| 29 return err_code; |
| 30 |
| 31 object_type_ = object_type; |
| 32 access_type_ = access_type; |
| 33 file_output_ = file_output; |
| 34 |
| 35 err_code = sandbox::CreateRestrictedToken(token_type, |
| 36 sandbox::INTEGRITY_LEVEL_LAST, |
| 37 sandbox::PRIMARY, &token_handle_); |
| 38 return err_code; |
| 39 } |
| 40 |
| 41 DWORD Finder::Scan() { |
| 42 if (!token_handle_.IsValid()) { |
| 43 return ERROR_NO_TOKEN; |
| 44 } |
| 45 |
| 46 if (object_type_ & kScanRegistry) { |
| 47 ParseRegistry(HKEY_LOCAL_MACHINE, L"HKLM\\"); |
| 48 ParseRegistry(HKEY_USERS, L"HKU\\"); |
| 49 ParseRegistry(HKEY_CURRENT_CONFIG, L"HKCC\\"); |
| 50 } |
| 51 |
| 52 if (object_type_ & kScanFileSystem) { |
| 53 ParseFileSystem(L"\\\\?\\C:"); |
| 54 } |
| 55 |
| 56 if (object_type_ & kScanKernelObjects) { |
| 57 ParseKernelObjects(L"\\"); |
| 58 } |
| 59 |
| 60 return ERROR_SUCCESS; |
| 61 } |
OLD | NEW |