Problem - Kevin Tafuro

* state information.
*/
hProcess = GetCurrentProcess( );
if (!OpenProcessToken(hProcess, TOKEN_ADJUST_PRIVILEGES, &hProcessToken)) {
LocalFree(pNewState);
return FALSE;
}
/* Adjust the privileges, specifying FALSE for DisableAllPrivileges so that the
* NewState argument will be used instead. Don't request information regarding
* the token's previous state by specifying 0 for the last three arguments.
*/
bResult = AdjustTokenPrivileges(hProcessToken, FALSE, pNewState, 0, 0, 0);
/* Cleanup and return the success or failure of the adjustment */
CloseHandle(hProcessToken);
LocalFree(pNewState);
return bResult;
}
Working with SID_AND_ATTRIBUTES structures
A SID_AND_ATTRIBUTES structure contains two fields: Sid and Attributes. The Sid field
is of type PSID, which is a variable-sized object that should never be directly manipulated
by application-level code. The meaning of the Attributes field varies depending
on the use of the structure. When a SID_AND_ATTRIBUTES structure is being used
for disabling SIDs (enabling the “deny” attribute), the Attributes field is ignored.
When a SID_AND_ATTRIBUTES structure is being used for restricting SIDs, the
Attributes field should always be set to 0. In both cases, it’s best to set the
Attributes field to 0.
Initializing the Sid field of a SID_AND_ATTRIBUTES structure can be done in a number
of ways, but perhaps one of the most useful ways is to use LookupAccountName( ) to
obtain the SID for a specific user or group name. The following code demonstrates
how to look up the SID for a name:
#include
PSID SpcLookupSidByName(LPCTSTR lpAccountName, PSID_NAME_USE peUse) {
PSID pSid;
DWORD cbSid, cchReferencedDomainName;
LPTSTR ReferencedDomainName;
SID_NAME_USE eUse;
cbSid = cchReferencedDomainName = 0;
if (!LookupAccountName(0, lpAccountName, 0, &cbSid, 0, &cchReferencedDomainName,
&eUse)) return 0;
if (!(pSid = LocalAlloc(LMEM_FIXED, cbSid))) return 0;
ReferencedDomainName = LocalAlloc(LMEM_FIXED,
(cchReferencedDomainName + 1) * sizeof(TCHAR));
if (!ReferencedDomainName) {
LocalFree(pSid);
14 | Chapter 1: Safe Initialization
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.