Changeset 105786 in vbox for trunk/src/VBox/Runtime/r3/win/system-get-nt-xxx-win.cpp

Timestamp:

Aug 21, 2024 5:27:35 PM (5 months ago)

Author:

vboxsync

Message:

IPRT: Added RTSystemQueryNtFeatureEnabled() API to query Windows (NT) features + testcase. Also includes internal code for querying Windows registry values. bugref:10753

File:

• trunk/src/VBox/Runtime/r3/win/system-get-nt-xxx-win.cpp (modified) (2 diffs)

trunk/src/VBox/Runtime/r3/win/system-get-nt-xxx-win.cpp

@@ -43 +43 @@
 
 #include "internal-r3-win.h"
+#include "internal-r3-registry-win.h"
 #include <iprt/system.h>
 #include <iprt/assert.h>
+#include <iprt/err.h>
 
 
@@ -67 +69 @@
 }
 
+
+RTDECL(int) RTSystemQueryNtFeatureEnabled(RTSYSNTFEATURE enmFeature, bool *pfEnabled)
+{
+    AssertPtrReturn(pfEnabled, VERR_INVALID_POINTER);
+
+    int rc;
+
+    switch (enmFeature)
+    {
+        case RTSYSNTFEATURE_CORE_ISOLATION_MEMORY_INTEGRITY: /* aka Code Integrity */
+        {
+            DWORD dwEnabled;
+            rc = RTSystemWinRegistryQueryDWORD(HKEY_LOCAL_MACHINE,
+                                    "SYSTEM\\CurrentControlSet\\Control\\DeviceGuard\\Scenarios\\HypervisorEnforcedCodeIntegrity",
+                                    "Enabled", &dwEnabled);
+            if (RT_SUCCESS(rc))
+                *pfEnabled = RT_BOOL(dwEnabled);
+            else if (rc == VERR_FILE_NOT_FOUND)
+                rc = VERR_NOT_SUPPORTED;
+            break;
+        }
+
+        default:
+            rc = VERR_NOT_IMPLEMENTED;
+            break;
+    }
+
+    return rc;
+}
+