source: trunk/server/source3/utils/profiles.c

Last change on this file was 745, checked in by Silvan Scherrer, 13 years ago

Samba Server: updated trunk to 3.6.0
File size: 8.5 KB
RevLine 
[745]1/*
2 Samba Unix/Linux SMB client utility profiles.c
[590]3
[745]4 Copyright (C) Richard Sharpe, <rsharpe@richardsharpe.com> 2002
5 Copyright (C) Jelmer Vernooij (conversion to popt) 2003
6 Copyright (C) Gerald (Jerry) Carter 2005
7
[590]8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
[745]12
[590]13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
[745]17
[590]18 You should have received a copy of the GNU General Public License
[745]19 along with this program. If not, see <http://www.gnu.org/licenses/>.
[590]20*/
[745]21
[590]22#include "includes.h"
[745]23#include "system/filesys.h"
24#include "popt_common.h"
25#include "registry/reg_objects.h"
26#include "registry/regfio.h"
27#include "../libcli/security/security.h"
[590]28
29/* GLOBAL VARIABLES */
30
[745]31struct dom_sid old_sid, new_sid;
[590]32int change = 0, new_val = 0;
33int opt_verbose = False;
34
35/********************************************************************
36********************************************************************/
37
38static void verbose_output(const char *format, ...) PRINTF_ATTRIBUTE(1,2);
39static void verbose_output(const char *format, ...)
40{
41 va_list args;
42 char *var = NULL;
43
44 if (!opt_verbose) {
45 return;
46 }
47
48 va_start(args, format);
49 if ((vasprintf(&var, format, args)) == -1) {
50 va_end(args);
51 return;
52 }
53
54 fprintf(stdout, "%s", var);
55 va_end(args);
56 SAFE_FREE(var);
57}
58
59/********************************************************************
60********************************************************************/
61
[745]62static bool swap_sid_in_acl( struct security_descriptor *sd, struct dom_sid *s1, struct dom_sid *s2 )
[590]63{
[745]64 struct security_acl *theacl;
[590]65 int i;
66 bool update = False;
67
68 verbose_output(" Owner SID: %s\n", sid_string_tos(sd->owner_sid));
[745]69 if ( dom_sid_equal( sd->owner_sid, s1 ) ) {
[590]70 sid_copy( sd->owner_sid, s2 );
71 update = True;
[745]72 verbose_output(" New Owner SID: %s\n",
[590]73 sid_string_tos(sd->owner_sid));
74
75 }
76
77 verbose_output(" Group SID: %s\n", sid_string_tos(sd->group_sid));
[745]78 if ( dom_sid_equal( sd->group_sid, s1 ) ) {
[590]79 sid_copy( sd->group_sid, s2 );
80 update = True;
[745]81 verbose_output(" New Group SID: %s\n",
[590]82 sid_string_tos(sd->group_sid));
83 }
84
85 theacl = sd->dacl;
86 verbose_output(" DACL: %d entries:\n", theacl->num_aces);
87 for ( i=0; i<theacl->num_aces; i++ ) {
[745]88 verbose_output(" Trustee SID: %s\n",
[590]89 sid_string_tos(&theacl->aces[i].trustee));
[745]90 if ( dom_sid_equal( &theacl->aces[i].trustee, s1 ) ) {
[590]91 sid_copy( &theacl->aces[i].trustee, s2 );
92 update = True;
[745]93 verbose_output(" New Trustee SID: %s\n",
[590]94 sid_string_tos(&theacl->aces[i].trustee));
95 }
96 }
97
98#if 0
99 theacl = sd->sacl;
100 verbose_output(" SACL: %d entries: \n", theacl->num_aces);
101 for ( i=0; i<theacl->num_aces; i++ ) {
[745]102 verbose_output(" Trustee SID: %s\n",
[590]103 sid_string_tos(&theacl->aces[i].trustee));
[745]104 if ( dom_sid_equal( &theacl->aces[i].trustee, s1 ) ) {
[590]105 sid_copy( &theacl->aces[i].trustee, s2 );
106 update = True;
[745]107 verbose_output(" New Trustee SID: %s\n",
[590]108 sid_string_tos(&theacl->aces[i].trustee));
109 }
110 }
111#endif
112 return update;
113}
114
115/********************************************************************
116********************************************************************/
117
118static bool copy_registry_tree( REGF_FILE *infile, REGF_NK_REC *nk,
119 REGF_NK_REC *parent, REGF_FILE *outfile,
120 const char *parentpath )
121{
122 REGF_NK_REC *key, *subkey;
[745]123 struct security_descriptor *new_sd;
[590]124 struct regval_ctr *values;
125 struct regsubkey_ctr *subkeys;
126 int i;
127 char *path;
128 WERROR werr;
129
130 /* swap out the SIDs in the security descriptor */
131
132 if ( !(new_sd = dup_sec_desc( outfile->mem_ctx, nk->sec_desc->sec_desc )) ) {
133 fprintf( stderr, "Failed to copy security descriptor!\n" );
134 return False;
135 }
136
137 verbose_output("ACL for %s%s%s\n", parentpath, parent ? "\\" : "", nk->keyname);
138 swap_sid_in_acl( new_sd, &old_sid, &new_sid );
139
140 werr = regsubkey_ctr_init(NULL, &subkeys);
141 if (!W_ERROR_IS_OK(werr)) {
142 DEBUG(0,("copy_registry_tree: talloc() failure!\n"));
143 return False;
144 }
145
[745]146 werr = regval_ctr_init(subkeys, &values);
147 if (!W_ERROR_IS_OK(werr)) {
[590]148 TALLOC_FREE( subkeys );
149 DEBUG(0,("copy_registry_tree: talloc() failure!\n"));
150 return False;
151 }
152
153 /* copy values into the struct regval_ctr */
154
155 for ( i=0; i<nk->num_values; i++ ) {
156 regval_ctr_addvalue( values, nk->values[i].valuename, nk->values[i].type,
[745]157 nk->values[i].data, (nk->values[i].data_size & ~VK_DATA_IN_OFFSET) );
[590]158 }
159
160 /* copy subkeys into the struct regsubkey_ctr */
161
162 while ( (subkey = regfio_fetch_subkey( infile, nk )) ) {
163 regsubkey_ctr_addkey( subkeys, subkey->keyname );
164 }
165
166 key = regfio_write_key( outfile, nk->keyname, values, subkeys, new_sd, parent );
167
168 /* write each one of the subkeys out */
169
170 path = talloc_asprintf(subkeys, "%s%s%s",
171 parentpath, parent ? "\\" : "",nk->keyname);
172 if (!path) {
173 TALLOC_FREE( subkeys );
174 return false;
175 }
176
177 nk->subkey_index = 0;
178 while ((subkey = regfio_fetch_subkey(infile, nk))) {
179 if (!copy_registry_tree( infile, subkey, key, outfile, path)) {
180 TALLOC_FREE(subkeys);
181 return false;
182 }
183 }
184
185 /* values is a talloc()'d child of subkeys here so just throw it all away */
186
187 TALLOC_FREE( subkeys );
188
189 verbose_output("[%s]\n", path);
190
191 return True;
192}
193
194/*********************************************************************
195*********************************************************************/
196
197int main( int argc, char *argv[] )
198{
199 TALLOC_CTX *frame = talloc_stackframe();
200 int opt;
201 REGF_FILE *infile, *outfile;
202 REGF_NK_REC *nk;
203 char *orig_filename, *new_filename;
204 struct poptOption long_options[] = {
205 POPT_AUTOHELP
206 { "change-sid", 'c', POPT_ARG_STRING, NULL, 'c', "Provides SID to change" },
207 { "new-sid", 'n', POPT_ARG_STRING, NULL, 'n', "Provides SID to change to" },
208 { "verbose", 'v', POPT_ARG_NONE, &opt_verbose, 'v', "Verbose output" },
209 POPT_COMMON_SAMBA
210 POPT_COMMON_VERSION
211 POPT_TABLEEND
212 };
213 poptContext pc;
214
215 load_case_tables();
216
217 /* setup logging options */
218
[745]219 setup_logging( "profiles", DEBUG_STDERR);
[590]220
221 pc = poptGetContext("profiles", argc, (const char **)argv, long_options,
222 POPT_CONTEXT_KEEP_FIRST);
223
224 poptSetOtherOptionHelp(pc, "<profilefile>");
225
226 /* Now, process the arguments */
227
228 while ((opt = poptGetNextOpt(pc)) != -1) {
229 switch (opt) {
230 case 'c':
231 change = 1;
232 if (!string_to_sid(&old_sid, poptGetOptArg(pc))) {
233 fprintf(stderr, "Argument to -c should be a SID in form of S-1-5-...\n");
234 poptPrintUsage(pc, stderr, 0);
235 exit(254);
236 }
237 break;
238
239 case 'n':
240 new_val = 1;
241 if (!string_to_sid(&new_sid, poptGetOptArg(pc))) {
242 fprintf(stderr, "Argument to -n should be a SID in form of S-1-5-...\n");
243 poptPrintUsage(pc, stderr, 0);
244 exit(253);
245 }
246 break;
247
248 }
249 }
250
251 poptGetArg(pc);
252
253 if (!poptPeekArg(pc)) {
254 poptPrintUsage(pc, stderr, 0);
255 exit(1);
256 }
257
258 if ((!change && new_val) || (change && !new_val)) {
259 fprintf(stderr, "You must specify both -c and -n if one or the other is set!\n");
260 poptPrintUsage(pc, stderr, 0);
261 exit(252);
262 }
263
264 orig_filename = talloc_strdup(frame, poptPeekArg(pc));
265 if (!orig_filename) {
266 exit(ENOMEM);
267 }
268 new_filename = talloc_asprintf(frame,
269 "%s.new",
270 orig_filename);
271 if (!new_filename) {
272 exit(ENOMEM);
273 }
274
275 if (!(infile = regfio_open( orig_filename, O_RDONLY, 0))) {
276 fprintf( stderr, "Failed to open %s!\n", orig_filename );
277 fprintf( stderr, "Error was (%s)\n", strerror(errno) );
278 exit (1);
279 }
280
281 if ( !(outfile = regfio_open( new_filename, (O_RDWR|O_CREAT|O_TRUNC),
282 (S_IRUSR|S_IWUSR) )) ) {
283 fprintf( stderr, "Failed to open new file %s!\n", new_filename );
284 fprintf( stderr, "Error was (%s)\n", strerror(errno) );
285 exit (1);
286 }
287
288 /* actually do the update now */
289
290 if ((nk = regfio_rootkey( infile )) == NULL) {
291 fprintf(stderr, "Could not get rootkey\n");
292 exit(3);
293 }
294
295 if (!copy_registry_tree( infile, nk, NULL, outfile, "")) {
296 fprintf(stderr, "Failed to write updated registry file!\n");
297 exit(2);
298 }
299
300 /* cleanup */
301
302 regfio_close(infile);
303 regfio_close(outfile);
304
305 poptFreeContext(pc);
306
307 TALLOC_FREE(frame);
308 return 0;
309}
Note: See TracBrowser for help on using the repository browser.