Программная настройка DCOM - C/C++ - Ответ 7897177

#include <windows.h>
#include <stdio.h>
#include <aclapi.h>
#include <tchar.h>
#include <conio.h>
#include <iostream.h>
#include <sddl.h>
 
int main(int argc, char* argv[])
{
    DWORD dwRes, dwDisposition;
    PSID pEveryoneSID = NULL, pAdminSID = NULL;
    PACL pACL = NULL;
    PSECURITY_DESCRIPTOR pSD = NULL;
    EXPLICIT_ACCESS ea;
    SID_IDENTIFIER_AUTHORITY SIDAuthWorld = SECURITY_WORLD_SID_AUTHORITY;
    SID_IDENTIFIER_AUTHORITY SIDAuthNT = SECURITY_NT_AUTHORITY;
    SECURITY_ATTRIBUTES sa;
    LONG lRes;
    HKEY hkSub = NULL;
    dwDisposition=REG_CREATED_NEW_KEY;
    // Create a well-known SID for the Everyone group.
    if(!AllocateAndInitializeSid(&SIDAuthWorld, 1,
                     SECURITY_WORLD_RID,
                     0, 0, 0, 0, 0, 0, 0,
                     &pEveryoneSID)){
        _tprintf(_T("AllocateAndInitializeSid Error %u\n"), GetLastError());
        goto Cleanup;
    }
    // Initialize an EXPLICIT_ACCESS structure for an ACE.
    // The ACE will allow Everyone read access to the key.
    ZeroMemory(&ea, 1 * sizeof(EXPLICIT_ACCESS));
    ea.grfAccessPermissions = GENERIC_ALL;
    ea.grfAccessMode = SET_ACCESS;
    ea.grfInheritance= NO_INHERITANCE;
    ea.Trustee.TrusteeForm = TRUSTEE_IS_SID;
    ea.Trustee.TrusteeType = TRUSTEE_IS_WELL_KNOWN_GROUP;
    ea.Trustee.ptstrName  = (LPTSTR) pEveryoneSID;
    // Create a new ACL that contains the new ACEs.
    dwRes = SetEntriesInAcl(1, &ea, NULL, &pACL);    //(2, ea, NULL, &pACL);
    if (ERROR_SUCCESS != dwRes){
        _tprintf(_T("SetEntriesInAcl Error %u\n"), GetLastError());
        goto Cleanup;
    }
    // Initialize a security descriptor.  
    pSD = (PSECURITY_DESCRIPTOR) LocalAlloc(LPTR,SECURITY_DESCRIPTOR_MIN_LENGTH);
    if (NULL == pSD){
        _tprintf(_T("LocalAlloc Error %u\n"), GetLastError());
        goto Cleanup;
    }
    if (!InitializeSecurityDescriptor(pSD,SECURITY_DESCRIPTOR_REVISION)){
        _tprintf(_T("InitializeSecurityDescriptor Error %u\n"),GetLastError());
        goto Cleanup; 
    } 
     // Add the ACL to the security descriptor.
    if (!SetSecurityDescriptorDacl(pSD, 
            TRUE,     // bDaclPresent flag   
            pACL,
            FALSE))   // not a default DACL 
    {  
        _tprintf(_T("SetSecurityDescriptorDacl Error %u\n"),GetLastError());
        goto Cleanup;
    }
    // Initialize a security attributes structure.
    sa.nLength = sizeof (SECURITY_ATTRIBUTES);
    sa.lpSecurityDescriptor = pSD;
    sa.bInheritHandle = FALSE;
    /*ConvertStringSecurityDescriptorToSecurityDescriptor(
                (LPCTSTR)("O:BAG:BAD:P(A;CIOI;GA;;;WD)"),
                SDDL_REVISION_1,
                &pSD,
                NULL); */
    // Use the security attributes to set the security descriptor 
    // when you create a key.
    lRes = RegCreateKeyEx(HKEY_LOCAL_MACHINE, _T("SOFTWARE\\Classes\\AppId\\{BBAA0E44-3862-490C-8E63-AC2D2D6EF733}\\"),
        0, NULL, REG_OPTION_VOLATILE,KEY_WRITE|KEY_READ , NULL, &hkSub, NULL);//AcroPDF
     if(RegSetValueEx(hkSub, _T("LaunchPermission"), 0, REG_BINARY, (BYTE*)(&sa), sizeof(sa))!=ERROR_SUCCESS)
        cout<<"Error 1\n ";
     if(RegSetValueEx(hkSub, _T("AccessPermission"), 0, REG_BINARY, (BYTE*)(&sa), sizeof(sa))!=ERROR_SUCCESS)
        cout<<"Error 2\n ";
 
    _tprintf(_T("RegCreateKeyEx result %u\n"), lRes );
 
Cleanup:
    if (pEveryoneSID)
        FreeSid(pEveryoneSID);
    if (pAdminSID) 
        FreeSid(pAdminSID);
    if (pACL) 
        LocalFree(pACL);
    if (pSD) 
        LocalFree(pSD);
    if (hkSub)
        RegCloseKey(hkSub);
    getch();
    return 0;
}