Method CreateLowIntegrityLevelToken

cpp/iedriver/BrowserFactory.cpp:932–984

}

bool BrowserFactory::CreateLowIntegrityLevelToken(HANDLE* process_token_handle,
                                                  HANDLE* mic_token_handle,
                                                  PSID* sid) {
  LOG(TRACE) << "Entering BrowserFactory::CreateLowIntegrityLevelToken";
  BOOL result = TRUE;
  TOKEN_MANDATORY_LABEL tml = {0};

  HANDLE process_handle = ::GetCurrentProcess();
  result = ::OpenProcessToken(process_handle,
                              MAXIMUM_ALLOWED,
                              process_token_handle);

  if (result) {
    result = ::DuplicateTokenEx(*process_token_handle,
                                MAXIMUM_ALLOWED,
                                NULL,
                                SecurityImpersonation,
                                TokenPrimary,
                                mic_token_handle);
    if (!result) {
      LOGERR(WARN) << "CreateLowIntegrityLevelToken: Could not duplicate token";
      ::CloseHandle(*process_token_handle);
    }
   }

  if (result) {
    result = ::ConvertStringSidToSid(SDDL_ML_LOW, sid);
    if (result) {
      tml.Label.Attributes = SE_GROUP_INTEGRITY;
      tml.Label.Sid = *sid;
    } else {
      LOGERR(WARN) << "CreateLowIntegrityLevelToken: Could not convert string SID to SID";
      ::CloseHandle(*process_token_handle);
      ::CloseHandle(*mic_token_handle);
    }
  }

  if(result) {
    result = ::SetTokenInformation(*mic_token_handle,
                                   TokenIntegrityLevel,
                                   &tml,
                                   sizeof(tml) + ::GetLengthSid(*sid));
    if (!result) {
      LOGERR(WARN) << "CreateLowIntegrityLevelToken: Could not set token information to low level";
      ::CloseHandle(*process_token_handle);
      ::CloseHandle(*mic_token_handle);
      ::LocalFree(*sid);
    }
  }

  ::CloseHandle(process_handle);
  return result == TRUE;
}

void BrowserFactory::InvokeClearCacheUtility(bool use_low_integrity_level) {
  LOG(TRACE) << "Entering BrowserFactory::InvokeClearCacheUtility";