You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
317 lines
9.2 KiB
317 lines
9.2 KiB
import win32security, ntsecuritycon, winnt
|
|
|
|
class Enum:
|
|
def __init__(self, *const_names):
|
|
"""Accepts variable number of constant names that can be found in either
|
|
win32security, ntsecuritycon, or winnt."""
|
|
for const_name in const_names:
|
|
try:
|
|
const_val=getattr(win32security,const_name)
|
|
except AttributeError:
|
|
try:
|
|
const_val=getattr(ntsecuritycon, const_name)
|
|
except AttributeError:
|
|
try:
|
|
const_val=getattr(winnt, const_name)
|
|
except AttributeError:
|
|
raise AttributeError('Constant "%s" not found in win32security, ntsecuritycon, or winnt.' %const_name)
|
|
setattr(self, const_name, const_val)
|
|
|
|
def lookup_name(self, const_val):
|
|
"""Looks up the name of a particular value."""
|
|
for k,v in self.__dict__.items():
|
|
if v==const_val:
|
|
return k
|
|
raise AttributeError('Value %s not found in enum' %const_val)
|
|
|
|
def lookup_flags(self, flags):
|
|
"""Returns the names of all recognized flags in input, and any flags not found in the enum."""
|
|
flag_names=[]
|
|
unknown_flags=flags
|
|
for k,v in self.__dict__.items():
|
|
if flags & v == v:
|
|
flag_names.append(k)
|
|
unknown_flags = unknown_flags & ~v
|
|
return flag_names, unknown_flags
|
|
|
|
TOKEN_INFORMATION_CLASS = Enum(
|
|
'TokenUser',
|
|
'TokenGroups',
|
|
'TokenPrivileges',
|
|
'TokenOwner',
|
|
'TokenPrimaryGroup',
|
|
'TokenDefaultDacl',
|
|
'TokenSource',
|
|
'TokenType',
|
|
'TokenImpersonationLevel',
|
|
'TokenStatistics',
|
|
'TokenRestrictedSids',
|
|
'TokenSessionId',
|
|
'TokenGroupsAndPrivileges',
|
|
'TokenSessionReference',
|
|
'TokenSandBoxInert',
|
|
'TokenAuditPolicy',
|
|
'TokenOrigin',
|
|
'TokenElevationType',
|
|
'TokenLinkedToken',
|
|
'TokenElevation',
|
|
'TokenHasRestrictions',
|
|
'TokenAccessInformation',
|
|
'TokenVirtualizationAllowed',
|
|
'TokenVirtualizationEnabled',
|
|
'TokenIntegrityLevel',
|
|
'TokenUIAccess',
|
|
'TokenMandatoryPolicy',
|
|
'TokenLogonSid')
|
|
|
|
TOKEN_TYPE = Enum(
|
|
'TokenPrimary',
|
|
'TokenImpersonation')
|
|
|
|
TOKEN_ELEVATION_TYPE = Enum(
|
|
'TokenElevationTypeDefault',
|
|
'TokenElevationTypeFull',
|
|
'TokenElevationTypeLimited')
|
|
|
|
POLICY_AUDIT_EVENT_TYPE = Enum(
|
|
'AuditCategorySystem',
|
|
'AuditCategoryLogon',
|
|
'AuditCategoryObjectAccess',
|
|
'AuditCategoryPrivilegeUse',
|
|
'AuditCategoryDetailedTracking',
|
|
'AuditCategoryPolicyChange',
|
|
'AuditCategoryAccountManagement',
|
|
'AuditCategoryDirectoryServiceAccess',
|
|
'AuditCategoryAccountLogon')
|
|
|
|
POLICY_INFORMATION_CLASS = Enum(
|
|
'PolicyAuditLogInformation',
|
|
'PolicyAuditEventsInformation',
|
|
'PolicyPrimaryDomainInformation',
|
|
'PolicyPdAccountInformation',
|
|
'PolicyAccountDomainInformation',
|
|
'PolicyLsaServerRoleInformation',
|
|
'PolicyReplicaSourceInformation',
|
|
'PolicyDefaultQuotaInformation',
|
|
'PolicyModificationInformation',
|
|
'PolicyAuditFullSetInformation',
|
|
'PolicyAuditFullQueryInformation',
|
|
'PolicyDnsDomainInformation')
|
|
|
|
POLICY_LSA_SERVER_ROLE = Enum(
|
|
'PolicyServerRoleBackup',
|
|
'PolicyServerRolePrimary')
|
|
|
|
## access modes for opening a policy handle - this is not a real enum
|
|
POLICY_ACCESS_MODES = Enum(
|
|
'POLICY_VIEW_LOCAL_INFORMATION',
|
|
'POLICY_VIEW_AUDIT_INFORMATION',
|
|
'POLICY_GET_PRIVATE_INFORMATION',
|
|
'POLICY_TRUST_ADMIN',
|
|
'POLICY_CREATE_ACCOUNT',
|
|
'POLICY_CREATE_SECRET',
|
|
'POLICY_CREATE_PRIVILEGE',
|
|
'POLICY_SET_DEFAULT_QUOTA_LIMITS',
|
|
'POLICY_SET_AUDIT_REQUIREMENTS',
|
|
'POLICY_AUDIT_LOG_ADMIN',
|
|
'POLICY_SERVER_ADMIN',
|
|
'POLICY_LOOKUP_NAMES',
|
|
'POLICY_NOTIFICATION',
|
|
'POLICY_ALL_ACCESS',
|
|
'POLICY_READ',
|
|
'POLICY_WRITE',
|
|
'POLICY_EXECUTE')
|
|
|
|
## EventAuditingOptions flags - not a real enum
|
|
POLICY_AUDIT_EVENT_OPTIONS_FLAGS = Enum(
|
|
'POLICY_AUDIT_EVENT_UNCHANGED',
|
|
'POLICY_AUDIT_EVENT_SUCCESS',
|
|
'POLICY_AUDIT_EVENT_FAILURE',
|
|
'POLICY_AUDIT_EVENT_NONE')
|
|
|
|
# AceType in ACE_HEADER - not a real enum
|
|
ACE_TYPE = Enum(
|
|
'ACCESS_MIN_MS_ACE_TYPE',
|
|
'ACCESS_ALLOWED_ACE_TYPE',
|
|
'ACCESS_DENIED_ACE_TYPE',
|
|
'SYSTEM_AUDIT_ACE_TYPE',
|
|
'SYSTEM_ALARM_ACE_TYPE',
|
|
'ACCESS_MAX_MS_V2_ACE_TYPE',
|
|
'ACCESS_ALLOWED_COMPOUND_ACE_TYPE',
|
|
'ACCESS_MAX_MS_V3_ACE_TYPE',
|
|
'ACCESS_MIN_MS_OBJECT_ACE_TYPE',
|
|
'ACCESS_ALLOWED_OBJECT_ACE_TYPE',
|
|
'ACCESS_DENIED_OBJECT_ACE_TYPE',
|
|
'SYSTEM_AUDIT_OBJECT_ACE_TYPE',
|
|
'SYSTEM_ALARM_OBJECT_ACE_TYPE',
|
|
'ACCESS_MAX_MS_OBJECT_ACE_TYPE',
|
|
'ACCESS_MAX_MS_V4_ACE_TYPE',
|
|
'ACCESS_MAX_MS_ACE_TYPE',
|
|
'ACCESS_ALLOWED_CALLBACK_ACE_TYPE',
|
|
'ACCESS_DENIED_CALLBACK_ACE_TYPE',
|
|
'ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE',
|
|
'ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE',
|
|
'SYSTEM_AUDIT_CALLBACK_ACE_TYPE',
|
|
'SYSTEM_ALARM_CALLBACK_ACE_TYPE',
|
|
'SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE',
|
|
'SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE',
|
|
'SYSTEM_MANDATORY_LABEL_ACE_TYPE',
|
|
'ACCESS_MAX_MS_V5_ACE_TYPE')
|
|
|
|
#bit flags for AceFlags - not a real enum
|
|
ACE_FLAGS = Enum(
|
|
'CONTAINER_INHERIT_ACE',
|
|
'FAILED_ACCESS_ACE_FLAG',
|
|
'INHERIT_ONLY_ACE',
|
|
'INHERITED_ACE',
|
|
'NO_PROPAGATE_INHERIT_ACE',
|
|
'OBJECT_INHERIT_ACE',
|
|
'SUCCESSFUL_ACCESS_ACE_FLAG',
|
|
'NO_INHERITANCE',
|
|
'SUB_CONTAINERS_AND_OBJECTS_INHERIT',
|
|
'SUB_CONTAINERS_ONLY_INHERIT',
|
|
'SUB_OBJECTS_ONLY_INHERIT')
|
|
|
|
# used in SetEntriesInAcl - very similar to ACE_TYPE
|
|
ACCESS_MODE = Enum(
|
|
'NOT_USED_ACCESS',
|
|
'GRANT_ACCESS',
|
|
'SET_ACCESS',
|
|
'DENY_ACCESS',
|
|
'REVOKE_ACCESS',
|
|
'SET_AUDIT_SUCCESS',
|
|
'SET_AUDIT_FAILURE')
|
|
|
|
# Bit flags in PSECURITY_DESCRIPTOR->Control - not a real enum
|
|
SECURITY_DESCRIPTOR_CONTROL_FLAGS = Enum(
|
|
'SE_DACL_AUTO_INHERITED', ## win2k and up
|
|
'SE_SACL_AUTO_INHERITED', ## win2k and up
|
|
'SE_DACL_PROTECTED', ## win2k and up
|
|
'SE_SACL_PROTECTED', ## win2k and up
|
|
'SE_DACL_DEFAULTED',
|
|
'SE_DACL_PRESENT',
|
|
'SE_GROUP_DEFAULTED',
|
|
'SE_OWNER_DEFAULTED',
|
|
'SE_SACL_PRESENT',
|
|
'SE_SELF_RELATIVE',
|
|
'SE_SACL_DEFAULTED')
|
|
|
|
# types of SID
|
|
SID_NAME_USE = Enum(
|
|
'SidTypeUser',
|
|
'SidTypeGroup',
|
|
'SidTypeDomain',
|
|
'SidTypeAlias',
|
|
'SidTypeWellKnownGroup',
|
|
'SidTypeDeletedAccount',
|
|
'SidTypeInvalid',
|
|
'SidTypeUnknown',
|
|
'SidTypeComputer',
|
|
'SidTypeLabel')
|
|
|
|
## bit flags, not a real enum
|
|
TOKEN_ACCESS_PRIVILEGES = Enum(
|
|
'TOKEN_ADJUST_DEFAULT',
|
|
'TOKEN_ADJUST_GROUPS',
|
|
'TOKEN_ADJUST_PRIVILEGES',
|
|
'TOKEN_ALL_ACCESS',
|
|
'TOKEN_ASSIGN_PRIMARY',
|
|
'TOKEN_DUPLICATE',
|
|
'TOKEN_EXECUTE',
|
|
'TOKEN_IMPERSONATE',
|
|
'TOKEN_QUERY',
|
|
'TOKEN_QUERY_SOURCE',
|
|
'TOKEN_READ',
|
|
'TOKEN_WRITE')
|
|
|
|
SECURITY_IMPERSONATION_LEVEL = Enum(
|
|
'SecurityAnonymous',
|
|
'SecurityIdentification',
|
|
'SecurityImpersonation',
|
|
'SecurityDelegation')
|
|
|
|
POLICY_SERVER_ENABLE_STATE = Enum(
|
|
'PolicyServerEnabled',
|
|
'PolicyServerDisabled')
|
|
|
|
POLICY_NOTIFICATION_INFORMATION_CLASS = Enum(
|
|
'PolicyNotifyAuditEventsInformation',
|
|
'PolicyNotifyAccountDomainInformation',
|
|
'PolicyNotifyServerRoleInformation',
|
|
'PolicyNotifyDnsDomainInformation',
|
|
'PolicyNotifyDomainEfsInformation',
|
|
'PolicyNotifyDomainKerberosTicketInformation',
|
|
'PolicyNotifyMachineAccountPasswordInformation')
|
|
|
|
TRUSTED_INFORMATION_CLASS = Enum(
|
|
'TrustedDomainNameInformation',
|
|
'TrustedControllersInformation',
|
|
'TrustedPosixOffsetInformation',
|
|
'TrustedPasswordInformation',
|
|
'TrustedDomainInformationBasic',
|
|
'TrustedDomainInformationEx',
|
|
'TrustedDomainAuthInformation',
|
|
'TrustedDomainFullInformation',
|
|
'TrustedDomainAuthInformationInternal',
|
|
'TrustedDomainFullInformationInternal',
|
|
'TrustedDomainInformationEx2Internal',
|
|
'TrustedDomainFullInformation2Internal')
|
|
|
|
TRUSTEE_FORM = Enum(
|
|
'TRUSTEE_IS_SID',
|
|
'TRUSTEE_IS_NAME',
|
|
'TRUSTEE_BAD_FORM',
|
|
'TRUSTEE_IS_OBJECTS_AND_SID',
|
|
'TRUSTEE_IS_OBJECTS_AND_NAME')
|
|
|
|
TRUSTEE_TYPE = Enum(
|
|
'TRUSTEE_IS_UNKNOWN',
|
|
'TRUSTEE_IS_USER',
|
|
'TRUSTEE_IS_GROUP',
|
|
'TRUSTEE_IS_DOMAIN',
|
|
'TRUSTEE_IS_ALIAS',
|
|
'TRUSTEE_IS_WELL_KNOWN_GROUP',
|
|
'TRUSTEE_IS_DELETED',
|
|
'TRUSTEE_IS_INVALID',
|
|
'TRUSTEE_IS_COMPUTER')
|
|
|
|
## SE_OBJECT_TYPE - securable objects
|
|
SE_OBJECT_TYPE = Enum(
|
|
'SE_UNKNOWN_OBJECT_TYPE',
|
|
'SE_FILE_OBJECT',
|
|
'SE_SERVICE',
|
|
'SE_PRINTER',
|
|
'SE_REGISTRY_KEY',
|
|
'SE_LMSHARE',
|
|
'SE_KERNEL_OBJECT',
|
|
'SE_WINDOW_OBJECT',
|
|
'SE_DS_OBJECT',
|
|
'SE_DS_OBJECT_ALL',
|
|
'SE_PROVIDER_DEFINED_OBJECT',
|
|
'SE_WMIGUID_OBJECT',
|
|
'SE_REGISTRY_WOW64_32KEY')
|
|
|
|
PRIVILEGE_FLAGS = Enum(
|
|
'SE_PRIVILEGE_ENABLED_BY_DEFAULT',
|
|
'SE_PRIVILEGE_ENABLED',
|
|
'SE_PRIVILEGE_USED_FOR_ACCESS')
|
|
|
|
# Group flags used with TokenGroups
|
|
TOKEN_GROUP_ATTRIBUTES = Enum(
|
|
'SE_GROUP_MANDATORY',
|
|
'SE_GROUP_ENABLED_BY_DEFAULT',
|
|
'SE_GROUP_ENABLED',
|
|
'SE_GROUP_OWNER',
|
|
'SE_GROUP_USE_FOR_DENY_ONLY',
|
|
'SE_GROUP_INTEGRITY',
|
|
'SE_GROUP_INTEGRITY_ENABLED',
|
|
'SE_GROUP_LOGON_ID',
|
|
'SE_GROUP_RESOURCE')
|
|
|
|
# Privilege flags returned by TokenPrivileges
|
|
TOKEN_PRIVILEGE_ATTRIBUTES = Enum(
|
|
'SE_PRIVILEGE_ENABLED_BY_DEFAULT',
|
|
'SE_PRIVILEGE_ENABLED',
|
|
'SE_PRIVILEGE_REMOVED',
|
|
'SE_PRIVILEGE_USED_FOR_ACCESS')
|