251 lines
8.0 KiB
C++
251 lines
8.0 KiB
C++
/*
|
|
*
|
|
* Copyright (c) 2020, David Xanatos
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
#pragma once
|
|
|
|
#include <QThread>
|
|
#include <QFileSystemWatcher>
|
|
|
|
#include "qsbieapi_global.h"
|
|
|
|
#include "SbieStatus.h"
|
|
|
|
#include "./Sandboxie/SandBox.h"
|
|
#include "./Sandboxie/BoxedProcess.h"
|
|
|
|
class QSBIEAPI_EXPORT CResLogEntry : public QSharedData
|
|
{
|
|
public:
|
|
CResLogEntry(quint32 ProcessId, quint32 Type, const QString& Value);
|
|
|
|
quint32 GetProcessId() const { return m_ProcessId; }
|
|
QDateTime GetTimeStamp() const { return m_TimeStamp; }
|
|
quint16 GetType() const { return m_Type.Flags; }
|
|
QString GetValue() const { return m_Name; }
|
|
QString GetTypeStr() const;
|
|
QString GetStautsStr() const;
|
|
void IncrCounter() { m_Counter++; }
|
|
int GetCount() const { return m_Counter; }
|
|
|
|
quint64 GetUID() const { return m_uid; }
|
|
|
|
protected:
|
|
QString m_Name;
|
|
quint32 m_ProcessId;
|
|
QDateTime m_TimeStamp;
|
|
|
|
union
|
|
{
|
|
quint16 Flags;
|
|
struct
|
|
{
|
|
quint16
|
|
Type : 12,
|
|
Open : 1,
|
|
Deny : 1,
|
|
Reserved : 1,
|
|
Trace : 1;
|
|
};
|
|
} m_Type;
|
|
|
|
int m_Counter;
|
|
|
|
quint64 m_uid;
|
|
};
|
|
|
|
typedef QSharedDataPointer<CResLogEntry> CResLogEntryPtr;
|
|
|
|
|
|
class QSBIEAPI_EXPORT CSbieAPI : public QThread
|
|
{
|
|
Q_OBJECT
|
|
public:
|
|
CSbieAPI(QObject* parent = 0);
|
|
virtual ~CSbieAPI();
|
|
|
|
static bool IsSbieCtrlRunning();
|
|
static bool TerminateSbieCtrl();
|
|
|
|
virtual SB_STATUS Connect(bool withQueue = true);
|
|
virtual SB_STATUS Disconnect();
|
|
virtual bool IsConnected() const;
|
|
|
|
virtual QString GetVersion();
|
|
|
|
virtual SB_STATUS TakeOver();
|
|
virtual SB_STATUS WatchIni(bool bEnable = true);
|
|
|
|
virtual QString GetSbiePath() const { return m_SbiePath; }
|
|
virtual QString GetIniPath() const { return m_IniPath; }
|
|
|
|
virtual void UpdateDriveLetters();
|
|
virtual QString Nt2DosPath(QString NtPath) const;
|
|
|
|
virtual SB_STATUS ReloadBoxes();
|
|
static SB_STATUS ValidateName(const QString& BoxName);
|
|
virtual SB_STATUS CreateBox(const QString& BoxName);
|
|
|
|
virtual SB_STATUS UpdateProcesses(bool bKeep);
|
|
virtual SB_STATUS UpdateProcesses(bool bKeep, const CSandBoxPtr& pBox);
|
|
|
|
virtual QMap<QString, CSandBoxPtr> GetAllBoxes() { return m_SandBoxes; }
|
|
|
|
virtual int TotalProcesses() const { return m_BoxedProxesses.count(); }
|
|
|
|
virtual CSandBoxPtr GetBoxByProcessId(quint32 ProcessId) const;
|
|
virtual CSandBoxPtr GetBoxByName(const QString &BoxName) const { return m_SandBoxes.value(BoxName.toLower()); }
|
|
virtual CBoxedProcessPtr GetProcessById(quint32 ProcessId) const;
|
|
|
|
virtual SB_STATUS TerminateAll();
|
|
|
|
virtual SB_STATUS SetProcessExemption(quint32 process_id, quint32 action_id, bool NewState);
|
|
virtual bool GetProcessExemption(quint32 process_id, quint32 action_id);
|
|
|
|
virtual QString GetBoxedPath(const QString& BoxName, const QString& Path);
|
|
virtual QString GetBoxedPath(const CSandBoxPtr& pBox, const QString& Path);
|
|
|
|
enum ESetMode
|
|
{
|
|
eIniUpdate = 0,
|
|
eIniAppend,
|
|
eIniInsert,
|
|
eIniDelete
|
|
};
|
|
|
|
// Config
|
|
virtual SB_STATUS ReloadConfig(quint32 SessionId = -1);
|
|
virtual QString SbieIniGet(const QString& Section, const QString& Setting, quint32 Index = 0, qint32* ErrCode = NULL);
|
|
virtual SB_STATUS SbieIniSet(const QString& Section, const QString& Setting, const QString& Value, ESetMode Mode = eIniUpdate);
|
|
virtual bool IsBoxEnabled(const QString& BoxName);
|
|
virtual CSbieIni* GetGlobalSettings() const { return m_pGlobalSection; }
|
|
virtual CSbieIni* GetUserSettings() const { return m_pUserSection; }
|
|
virtual bool IsConfigLocked();
|
|
virtual SB_STATUS UnlockConfig(const QString& Password);
|
|
virtual SB_STATUS LockConfig(const QString& NewPassword);
|
|
virtual void ClearPassword();
|
|
|
|
// Forced Processes
|
|
virtual SB_STATUS DisableForceProcess(bool Set, int Seconds = 0);
|
|
virtual bool AreForceProcessDisabled();
|
|
|
|
// Monitor
|
|
virtual SB_STATUS EnableMonitor(bool Enable);
|
|
virtual bool IsMonitoring();
|
|
|
|
virtual QList<CResLogEntryPtr> GetResLog() const { QReadLocker Lock(&m_ResLogMutex); return m_ResLogList; }
|
|
virtual void ClearResLog() { QWriteLocker Lock(&m_ResLogMutex); m_ResLogList.clear(); }
|
|
|
|
// Other
|
|
virtual QString GetSbieMsgStr(quint32 code, quint32 Lang = 1033);
|
|
|
|
virtual SB_STATUS RunStart(const QString& BoxName, const QString& Command, QProcess* pProcess = NULL);
|
|
virtual QString GetStartPath() const;
|
|
|
|
enum ESbieQueuedRequests
|
|
{
|
|
ePrintSpooler = -1,
|
|
eInvalidQueuedRequests = 0,
|
|
eFileMigration = 1,
|
|
eInetBlockade= 2,
|
|
};
|
|
|
|
public slots:
|
|
virtual void SendReplyData(quint32 RequestId, const QVariantMap& Result);
|
|
|
|
signals:
|
|
void StatusChanged();
|
|
void ConfigReloaded();
|
|
//void LogMessage(const QString& Message, bool bNotify = true);
|
|
void LogSbieMessage(quint32 MsgCode, const QStringList& MsgData, quint32 ProcessId);
|
|
void ProcessBoxed(quint32 ProcessId, const QString& Path, const QString& Box, quint32 ParentId);
|
|
void FileToRecover(const QString& BoxName, const QString& FilePath, quint32 ProcessId);
|
|
void BoxClosed(const QString& BoxName);
|
|
void NotAuthorized(bool bLoginRequired, bool &bRetry);
|
|
void QueuedRequest(quint32 ClientPid, quint32 ClientTid, quint32 RequestId, const QVariantMap& Data);
|
|
|
|
protected slots:
|
|
//virtual void OnMonitorEntry(quint32 ProcessId, quint32 Type, const QString& Value);
|
|
virtual void OnIniChanged(const QString &path);
|
|
virtual void OnReloadConfig();
|
|
virtual CBoxedProcessPtr OnProcessBoxed(quint32 ProcessId, const QString& Path, const QString& Box, quint32 ParentId);
|
|
|
|
protected:
|
|
friend class CSandBox;
|
|
friend class CBoxedProcess;
|
|
|
|
virtual CSandBox* NewSandBox(const QString& BoxName, class CSbieAPI* pAPI);
|
|
virtual CBoxedProcess* NewBoxedProcess(quint32 ProcessId, class CSandBox* pBox);
|
|
|
|
virtual QString GetSbieHome() const;
|
|
virtual QString GetIniPath(bool* IsHome) const;
|
|
virtual QString GetUserSection() const;
|
|
|
|
virtual bool HasProcesses(const QString& BoxName);
|
|
|
|
virtual bool GetQueue();
|
|
virtual bool GetLog();
|
|
virtual bool GetMonitor();
|
|
|
|
virtual SB_STATUS TerminateAll(const QString& BoxName);
|
|
virtual SB_STATUS Terminate(quint32 ProcessId);
|
|
|
|
virtual SB_STATUS RunSandboxed(const QString& BoxName, const QString& Command, QString WrkDir = QString(), quint32 Flags = 0);
|
|
|
|
virtual SB_STATUS UpdateBoxPaths(const CSandBoxPtr& pSandBox);
|
|
virtual SB_STATUS UpdateProcessInfo(const CBoxedProcessPtr& pProcess);
|
|
|
|
virtual void GetUserPaths();
|
|
|
|
virtual QString GetDeviceMap();
|
|
virtual QByteArray MakeEnvironment(bool AddDeviceMap);
|
|
|
|
virtual void run();
|
|
|
|
QMap<QString, CSandBoxPtr> m_SandBoxes;
|
|
QMap<quint32, CBoxedProcessPtr> m_BoxedProxesses;
|
|
|
|
mutable QReadWriteLock m_ResLogMutex;
|
|
QList<CResLogEntryPtr> m_ResLogList;
|
|
|
|
mutable QReadWriteLock m_DriveLettersMutex;
|
|
QMap<QString, QString> m_DriveLetters;
|
|
|
|
QString m_SbiePath;
|
|
QString m_IniPath;
|
|
QFileSystemWatcher m_IniWatcher;
|
|
|
|
bool m_bReloadPending;
|
|
|
|
bool m_bWithQueue;
|
|
bool m_bTerminate;
|
|
|
|
CSbieIni* m_pGlobalSection;
|
|
CSbieIni* m_pUserSection;
|
|
|
|
QString m_ProgramDataDir;
|
|
QString m_PublicDir;
|
|
QString m_UserDir;
|
|
|
|
private:
|
|
mutable QMutex m_ThreadMutex;
|
|
mutable QWaitCondition m_ThreadWait;
|
|
|
|
SB_STATUS CallServer(void* req, void* rpl) const;
|
|
SB_STATUS SbieIniSet(void *RequestBuf, void *pPasswordWithinRequestBuf, const QString& SectionName, const QString& SettingName);
|
|
struct SSbieAPI* m;
|
|
};
|