Function getLogonSid

PIMELauncher/PipeSecurity.cpp:26–69

static std::wstring getLogonSid() {
    // Get process token with TOKEN_QUERY privilege.
    std::wstring logonSidStr;
    HANDLE processToken = INVALID_HANDLE_VALUE;
    try {
        if (!::OpenProcessToken(::GetCurrentProcess(), TOKEN_QUERY, &processToken)) {
            throw std::runtime_error("Fail to open process token");
        }

        DWORD bufSize = 0;
        if (!::GetTokenInformation(processToken, TokenGroups, nullptr, 0, &bufSize)) {
            if (::GetLastError() != ERROR_INSUFFICIENT_BUFFER) {
                throw std::runtime_error("Fail to get token info buffer size.");
            }
        }

        auto tokenGroupsBuf = std::make_unique<char[]>(bufSize);
        if (!::GetTokenInformation(processToken, TokenGroups, tokenGroupsBuf.get(), bufSize, &bufSize)) {
            DWORD err = ::GetLastError();
            throw std::runtime_error("Fail to get token group data.");
        }

        auto groups = reinterpret_cast<TOKEN_GROUPS*>(tokenGroupsBuf.get());
        PSID logonSid = nullptr;
        for (DWORD i = 0; i < groups->GroupCount; ++i) {
            auto group = groups->Groups[i];
            if ((group.Attributes & SE_GROUP_LOGON_ID) == SE_GROUP_LOGON_ID) {
                /// Found the logon group.
                logonSid = group.Sid;
                break;
            }
        }

        if (logonSid) {
            logonSidStr = sidToStr(logonSid);
        }
    }
    catch (...) {
        if (processToken != INVALID_HANDLE_VALUE) {
            ::CloseHandle(processToken);
        }
    }
    return logonSidStr;
}

static bool getProcessOwnerSids(std::wstring& ownerSidStr, std::wstring& groupSidStr) {
    PSID ownerSid = nullptr;