kenneth.skovhede@gmail.com
20a6757d56
git-svn-id: https://duplicati.googlecode.com/svn/trunk@11 59da171f-624f-0410-aa54-27559c288bec
229 lines
6.4 KiB
Python
229 lines
6.4 KiB
Python
import win32security
|
|
class Enum:
|
|
def __init__(self,*consts):
|
|
for const in consts:
|
|
setattr(self,const,getattr(win32security,const))
|
|
|
|
TOKEN_INFORMATION_CLASS = Enum(
|
|
'TokenDefaultDacl',
|
|
'TokenGroups',
|
|
'TokenGroupsAndPrivileges',
|
|
'TokenImpersonationLevel',
|
|
'TokenOwner',
|
|
'TokenPrimaryGroup',
|
|
'TokenPrivileges',
|
|
'TokenRestrictedSids',
|
|
'TokenSandBoxInert',
|
|
'TokenSessionId',
|
|
'TokenSource',
|
|
'TokenStatistics',
|
|
'TokenType',
|
|
'TokenUser')
|
|
|
|
TOKEN_TYPE = Enum(
|
|
'TokenPrimary',
|
|
'TokenImpersonation')
|
|
|
|
POLICY_AUDIT_EVENT_TYPE = Enum(
|
|
'AuditCategorySystem',
|
|
'AuditCategoryLogon',
|
|
'AuditCategoryObjectAccess',
|
|
'AuditCategoryPrivilegeUse',
|
|
'AuditCategoryDetailedTracking',
|
|
'AuditCategoryPolicyChange',
|
|
'AuditCategoryAccountManagement',
|
|
'AuditCategoryDirectoryServiceAccess',
|
|
'AuditCategoryAccountLogon')
|
|
|
|
POLICY_INFORMATION_CLASS = Enum(
|
|
'PolicyAuditLogInformation',
|
|
'PolicyAuditEventsInformation',
|
|
'PolicyPrimaryDomainInformation',
|
|
'PolicyPdAccountInformation',
|
|
'PolicyAccountDomainInformation',
|
|
'PolicyLsaServerRoleInformation',
|
|
'PolicyReplicaSourceInformation',
|
|
'PolicyDefaultQuotaInformation',
|
|
'PolicyModificationInformation',
|
|
'PolicyAuditFullSetInformation',
|
|
'PolicyAuditFullQueryInformation',
|
|
'PolicyDnsDomainInformation')
|
|
|
|
POLICY_LSA_SERVER_ROLE = Enum(
|
|
'PolicyServerRoleBackup',
|
|
'PolicyServerRolePrimary')
|
|
|
|
## access modes for opening a policy handle - this is not a real enum
|
|
POLICY_ACCESS_MODES = Enum(
|
|
'POLICY_VIEW_LOCAL_INFORMATION',
|
|
'POLICY_VIEW_AUDIT_INFORMATION',
|
|
'POLICY_GET_PRIVATE_INFORMATION',
|
|
'POLICY_TRUST_ADMIN',
|
|
'POLICY_CREATE_ACCOUNT',
|
|
'POLICY_CREATE_SECRET',
|
|
'POLICY_CREATE_PRIVILEGE',
|
|
'POLICY_SET_DEFAULT_QUOTA_LIMITS',
|
|
'POLICY_SET_AUDIT_REQUIREMENTS',
|
|
'POLICY_AUDIT_LOG_ADMIN',
|
|
'POLICY_SERVER_ADMIN',
|
|
'POLICY_LOOKUP_NAMES',
|
|
'POLICY_NOTIFICATION',
|
|
'POLICY_ALL_ACCESS',
|
|
'POLICY_READ',
|
|
'POLICY_WRITE',
|
|
'POLICY_EXECUTE')
|
|
|
|
## EventAuditingOptions flags - not a real enum
|
|
POLICY_AUDIT_EVENT_OPTIONS_FLAGS = Enum(
|
|
'POLICY_AUDIT_EVENT_UNCHANGED',
|
|
'POLICY_AUDIT_EVENT_SUCCESS',
|
|
'POLICY_AUDIT_EVENT_FAILURE',
|
|
'POLICY_AUDIT_EVENT_NONE')
|
|
|
|
# AceType in ACE_HEADER - not a real enum
|
|
ACE_TYPE = Enum(
|
|
'ACCESS_ALLOWED_ACE_TYPE',
|
|
'ACCESS_ALLOWED_OBJECT_ACE_TYPE',
|
|
'ACCESS_DENIED_ACE_TYPE',
|
|
'ACCESS_DENIED_OBJECT_ACE_TYPE',
|
|
'SYSTEM_AUDIT_ACE_TYPE',
|
|
'SYSTEM_AUDIT_OBJECT_ACE_TYPE')
|
|
|
|
#bit flags for AceFlags - not a real enum
|
|
ACE_FLAGS = Enum(
|
|
'CONTAINER_INHERIT_ACE',
|
|
'FAILED_ACCESS_ACE_FLAG',
|
|
'INHERIT_ONLY_ACE',
|
|
'INHERITED_ACE',
|
|
'NO_PROPAGATE_INHERIT_ACE',
|
|
'OBJECT_INHERIT_ACE',
|
|
'SUCCESSFUL_ACCESS_ACE_FLAG',
|
|
'NO_INHERITANCE',
|
|
'SUB_CONTAINERS_AND_OBJECTS_INHERIT',
|
|
'SUB_CONTAINERS_ONLY_INHERIT',
|
|
'SUB_OBJECTS_ONLY_INHERIT')
|
|
|
|
# used in SetEntriesInAcl - very similar to ACE_TYPE
|
|
ACCESS_MODE = Enum(
|
|
'NOT_USED_ACCESS',
|
|
'GRANT_ACCESS',
|
|
'SET_ACCESS',
|
|
'DENY_ACCESS',
|
|
'REVOKE_ACCESS',
|
|
'SET_AUDIT_SUCCESS',
|
|
'SET_AUDIT_FAILURE')
|
|
|
|
# Bit flags in PSECURITY_DESCRIPTOR->Control - not a real enum
|
|
SECURITY_DESCRIPTOR_CONTROL_FLAGS = Enum(
|
|
'SE_DACL_AUTO_INHERITED', ## win2k and up
|
|
'SE_SACL_AUTO_INHERITED', ## win2k and up
|
|
'SE_DACL_PROTECTED', ## win2k and up
|
|
'SE_SACL_PROTECTED', ## win2k and up
|
|
'SE_DACL_DEFAULTED',
|
|
'SE_DACL_PRESENT',
|
|
'SE_GROUP_DEFAULTED',
|
|
'SE_OWNER_DEFAULTED',
|
|
'SE_SACL_PRESENT',
|
|
'SE_SELF_RELATIVE',
|
|
'SE_SACL_DEFAULTED')
|
|
|
|
# types of SID
|
|
SID_NAME_USE = Enum(
|
|
'SidTypeUser',
|
|
'SidTypeGroup',
|
|
'SidTypeDomain',
|
|
'SidTypeAlias',
|
|
'SidTypeWellKnownGroup',
|
|
'SidTypeDeletedAccount',
|
|
'SidTypeInvalid',
|
|
'SidTypeUnknown',
|
|
'SidTypeComputer')
|
|
|
|
## bit flags, not a real enum
|
|
TOKEN_ACCESS_PRIVILEGES = Enum(
|
|
'TOKEN_ADJUST_DEFAULT',
|
|
'TOKEN_ADJUST_GROUPS',
|
|
'TOKEN_ADJUST_PRIVILEGES',
|
|
'TOKEN_ALL_ACCESS',
|
|
'TOKEN_ASSIGN_PRIMARY',
|
|
'TOKEN_DUPLICATE',
|
|
'TOKEN_EXECUTE',
|
|
'TOKEN_IMPERSONATE',
|
|
'TOKEN_QUERY',
|
|
'TOKEN_QUERY_SOURCE',
|
|
'TOKEN_READ',
|
|
'TOKEN_WRITE')
|
|
|
|
SECURITY_IMPERSONATION_LEVEL = Enum(
|
|
'SecurityAnonymous',
|
|
'SecurityIdentification',
|
|
'SecurityImpersonation',
|
|
'SecurityDelegation')
|
|
|
|
POLICY_SERVER_ENABLE_STATE = Enum(
|
|
'PolicyServerEnabled',
|
|
'PolicyServerDisabled')
|
|
|
|
POLICY_NOTIFICATION_INFORMATION_CLASS = Enum(
|
|
'PolicyNotifyAuditEventsInformation',
|
|
'PolicyNotifyAccountDomainInformation',
|
|
'PolicyNotifyServerRoleInformation',
|
|
'PolicyNotifyDnsDomainInformation',
|
|
'PolicyNotifyDomainEfsInformation',
|
|
'PolicyNotifyDomainKerberosTicketInformation',
|
|
'PolicyNotifyMachineAccountPasswordInformation')
|
|
|
|
TRUSTED_INFORMATION_CLASS = Enum(
|
|
'TrustedDomainNameInformation',
|
|
'TrustedControllersInformation',
|
|
'TrustedPosixOffsetInformation',
|
|
'TrustedPasswordInformation',
|
|
'TrustedDomainInformationBasic',
|
|
'TrustedDomainInformationEx',
|
|
'TrustedDomainAuthInformation',
|
|
'TrustedDomainFullInformation',
|
|
'TrustedDomainAuthInformationInternal',
|
|
'TrustedDomainFullInformationInternal',
|
|
'TrustedDomainInformationEx2Internal',
|
|
'TrustedDomainFullInformation2Internal')
|
|
|
|
TRUSTEE_FORM = Enum(
|
|
'TRUSTEE_IS_SID',
|
|
'TRUSTEE_IS_NAME',
|
|
'TRUSTEE_BAD_FORM',
|
|
'TRUSTEE_IS_OBJECTS_AND_SID',
|
|
'TRUSTEE_IS_OBJECTS_AND_NAME')
|
|
|
|
TRUSTEE_TYPE = Enum(
|
|
'TRUSTEE_IS_UNKNOWN',
|
|
'TRUSTEE_IS_USER',
|
|
'TRUSTEE_IS_GROUP',
|
|
'TRUSTEE_IS_DOMAIN',
|
|
'TRUSTEE_IS_ALIAS',
|
|
'TRUSTEE_IS_WELL_KNOWN_GROUP',
|
|
'TRUSTEE_IS_DELETED',
|
|
'TRUSTEE_IS_INVALID',
|
|
'TRUSTEE_IS_COMPUTER')
|
|
|
|
## SE_OBJECT_TYPE - securable objects
|
|
SE_OBJECT_TYPE = Enum(
|
|
'SE_UNKNOWN_OBJECT_TYPE',
|
|
'SE_FILE_OBJECT',
|
|
'SE_SERVICE',
|
|
'SE_PRINTER',
|
|
'SE_REGISTRY_KEY',
|
|
'SE_LMSHARE',
|
|
'SE_KERNEL_OBJECT',
|
|
'SE_WINDOW_OBJECT',
|
|
'SE_DS_OBJECT',
|
|
'SE_DS_OBJECT_ALL',
|
|
'SE_PROVIDER_DEFINED_OBJECT',
|
|
'SE_WMIGUID_OBJECT',
|
|
'SE_REGISTRY_WOW64_32KEY')
|
|
|
|
PRIVILEGE_FLAGS = Enum(
|
|
'SE_PRIVILEGE_ENABLED_BY_DEFAULT',
|
|
'SE_PRIVILEGE_ENABLED',
|
|
'SE_PRIVILEGE_USED_FOR_ACCESS')
|
|
|