Function DOKAN_CALLBACK CryptGetFileSecurity

cppcryptfs/dokan/cryptdokan.cpp:1610–1711

}

static NTSTATUS DOKAN_CALLBACK CryptGetFileSecurity(
    LPCWSTR FileName, PSECURITY_INFORMATION SecurityInformation,
    PSECURITY_DESCRIPTOR SecurityDescriptor, ULONG BufferLength,
    PULONG LengthNeeded, PDOKAN_FILE_INFO DokanFileInfo) {
  FileNameEnc filePath(DokanFileInfo, FileName);

  BOOLEAN requestingSaclInfo;

  UNREFERENCED_PARAMETER(DokanFileInfo);

  DbgPrint(L"GetFileSecurity %s\n", FileName);

  CryptCheckFlag(*SecurityInformation, FILE_SHARE_READ);
  CryptCheckFlag(*SecurityInformation, OWNER_SECURITY_INFORMATION);
  CryptCheckFlag(*SecurityInformation, GROUP_SECURITY_INFORMATION);
  CryptCheckFlag(*SecurityInformation, DACL_SECURITY_INFORMATION);
  CryptCheckFlag(*SecurityInformation, SACL_SECURITY_INFORMATION);
  CryptCheckFlag(*SecurityInformation, LABEL_SECURITY_INFORMATION);
  CryptCheckFlag(*SecurityInformation, ATTRIBUTE_SECURITY_INFORMATION);
  CryptCheckFlag(*SecurityInformation, SCOPE_SECURITY_INFORMATION);
  CryptCheckFlag(*SecurityInformation,
                 PROCESS_TRUST_LABEL_SECURITY_INFORMATION);
  CryptCheckFlag(*SecurityInformation, BACKUP_SECURITY_INFORMATION);
  CryptCheckFlag(*SecurityInformation, PROTECTED_DACL_SECURITY_INFORMATION);
  CryptCheckFlag(*SecurityInformation, PROTECTED_SACL_SECURITY_INFORMATION);
  CryptCheckFlag(*SecurityInformation, UNPROTECTED_DACL_SECURITY_INFORMATION);
  CryptCheckFlag(*SecurityInformation, UNPROTECTED_SACL_SECURITY_INFORMATION);

  requestingSaclInfo = ((*SecurityInformation & SACL_SECURITY_INFORMATION) ||
                        (*SecurityInformation & BACKUP_SECURITY_INFORMATION));

  if (!g_HasSeSecurityPrivilege) {
    *SecurityInformation &= ~SACL_SECURITY_INFORMATION;
    *SecurityInformation &= ~BACKUP_SECURITY_INFORMATION;
  }

  DbgPrint(L"  Opening new handle with READ_CONTROL access\n");

  bool is_virtual = rt_is_virtual_file(GetContext(), FileName);

  wstring virt_path;

  if (is_virtual) {
    if (rt_is_dir_iv_file(GetContext(), FileName)) {
      if (!get_file_directory(filePath, virt_path)) {
        return ToNtStatus(ERROR_ACCESS_DENIED);
      }
    } else if (rt_is_name_file(GetContext(), FileName)) {

      wstring enc_path;

      remove_longname_suffix(FileName, enc_path);

      if (!decrypt_path(GetContext(), &enc_path[0], virt_path))
        return ToNtStatus(ERROR_ACCESS_DENIED);
    } else {
      return ToNtStatus(ERROR_ACCESS_DENIED);
    }