From: Kern Sibbald <kern@sibbald.com>
Date: Tue, 28 Jan 2003 18:05:21 +0000 (+0000)
Subject: Get backup and restore privileges on Win32
X-Git-Tag: Release-1.30~139
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=acc8ae9e5969ac380e41e77a5de7b341e3cdd073;p=bacula%2Fbacula

Get backup and restore privileges on Win32


git-svn-id: https://bacula.svn.sourceforge.net/svnroot/bacula/trunk@328 91ce42f0-d328-0410-95d8-f526ca767f89
---

diff --git a/bacula/src/filed/win32/winservice.cpp b/bacula/src/filed/win32/winservice.cpp
index e17c7e2469..2e770e4792 100755
--- a/bacula/src/filed/win32/winservice.cpp
+++ b/bacula/src/filed/win32/winservice.cpp
@@ -67,86 +67,6 @@ bacService::bacService()
             g_platform_id = osversioninfo.dwPlatformId;
 }
 
-// CurrentUser - fills a buffer with the name of the current user!
-BOOL
-bacService::CurrentUser(char *buffer, UINT size)
-{
-   // How to obtain the name of the current user depends upon the OS being used
-   if ((g_platform_id == VER_PLATFORM_WIN32_NT) && bacService::RunningAsService()) {
-      // Windows NT, service-mode
-
-      // -=- FIRSTLY - verify that a user is logged on
-
-      // Get the current Window station
-      HWINSTA station = GetProcessWindowStation();
-      if (station == NULL)
-              return FALSE;
-
-      // Get the current user SID size
-      DWORD usersize;
-      GetUserObjectInformation(station,
-              UOI_USER_SID, NULL, 0, &usersize);
-
-      // Check the required buffer size isn't zero
-      if (usersize == 0) {
-         // No user is logged in - ensure we're not impersonating anyone
-         RevertToSelf();
-         g_impersonating_user = FALSE;
-
-         // Return "" as the name...
-         if (strlen("") >= size)
-                 return FALSE;
-         strcpy(buffer, "");
-
-         return TRUE;
-      }
-
-      // -=- SECONDLY - a user is logged on but if we're not impersonating
-      //     them then we can't continue!
-      if (!g_impersonating_user) {
-         // Return "" as the name...
-         if (strlen("") >= size)
-                 return FALSE;
-         strcpy(buffer, "");
-         return TRUE;
-      }
-   }
-           
-   // -=- When we reach here, we're either running under Win9x, or we're running
-   //     under NT as an application or as a service impersonating a user
-   // Either way, we should find a suitable user name.
-
-   switch (g_platform_id) {
-
-   case VER_PLATFORM_WIN32_WINDOWS:
-   case VER_PLATFORM_WIN32_NT:
-      // Just call GetCurrentUser
-      DWORD length = size;
-
-      if (GetUserName(buffer, &length) == 0)
-      {
-              UINT error = GetLastError();
-
-              if (error == ERROR_NOT_LOGGED_ON)
-              {
-                      // No user logged on
-                      if (strlen("") >= size)
-                              return FALSE;
-                      strcpy(buffer, "");
-                      return TRUE;
-              }
-              else
-              {
-                      // Genuine error...
-                      return FALSE;
-              }
-      }
-      return TRUE;
-   }
-
-   // OS was not recognised!
-   return FALSE;
-}
 
 // IsWin95 - returns a BOOL indicating whether the current OS is Win95
 BOOL
@@ -494,6 +414,9 @@ void WINAPI ServiceMain(DWORD argc, char **argv)
 //   NT ONLY !!!!
 DWORD WINAPI ServiceWorkThread(LPVOID lpwThreadParam)
 {
+    HANDLE hToken;
+    TOKEN_PRIVILEGES tkp;
+
     // Save the current thread identifier
     g_servicethread = GetCurrentThreadId();
 
@@ -507,10 +430,59 @@ DWORD WINAPI ServiceWorkThread(LPVOID lpwThreadParam)
        return 0;
     }
 
-    // RUN!
-   BaculaAppMain();
-
-   // Mark that we're no longer running
+      // Get a token for this process. 
+       
+      if (!OpenProcessToken(GetCurrentProcess(), 
+              TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &hToken)) {
+// Forge onward anyway in the hopes of succeeding.
+//       MessageBox(NULL, "System shutdown failed: OpenProcessToken", "shutdown", MB_OK);
+//       exit(1);
+      } 
+
+      // Get the LUID for the backup privilege. 
+       
+      LookupPrivilegeValue(NULL, SE_BACKUP_NAME, 
+              &tkp.Privileges[0].Luid); 
+
+       
+      tkp.PrivilegeCount = 1;  // one privilege to set    
+      tkp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED; 
+       
+      // Get the shutdown privilege for this process. 
+       
+      AdjustTokenPrivileges(hToken, FALSE, &tkp, 0, 
+              (PTOKEN_PRIVILEGES)NULL, 0); 
+       
+      // Cannot test the return value of AdjustTokenPrivileges. 
+       
+      if (GetLastError() != ERROR_SUCCESS) {
+//       MessageBox(NULL, "System shutdown failed: AdjustTokePrivileges", "shutdown", MB_OK);
+      } 
+     
+      // Get the LUID for the restore privilege. 
+       
+      LookupPrivilegeValue(NULL, SE_RESTORE_NAME, 
+              &tkp.Privileges[0].Luid); 
+
+       
+      tkp.PrivilegeCount = 1;  // one privilege to set    
+      tkp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED; 
+       
+      // Get the shutdown privilege for this process. 
+       
+      AdjustTokenPrivileges(hToken, FALSE, &tkp, 0, 
+              (PTOKEN_PRIVILEGES)NULL, 0); 
+       
+      // Cannot test the return value of AdjustTokenPrivileges. 
+       
+      if (GetLastError() != ERROR_SUCCESS) {
+//       MessageBox(NULL, "System shutdown failed: AdjustTokePrivileges", "shutdown", MB_OK);
+      } 
+
+    /* Call Bacula main code */
+    BaculaAppMain();
+
+    // Mark that we're no longer running
     g_servicethread = 0;
 
     // Tell the service manager that we've stopped.