Changeset 18673 in vbox for trunk/src

Timestamp:

Apr 3, 2009 9:02:44 AM (16 years ago)

Author:

vboxsync

Message:

Guest Additions/common: Added token privilege handling.

File:

• trunk/src/VBox/Additions/common/VBoxService/VBoxServiceTimeSync.cpp (modified) (8 diffs)

trunk/src/VBox/Additions/common/VBoxService/VBoxServiceTimeSync.cpp

@@ -116 +116 @@
 static uint32_t g_TimeSyncMinAdjust = 1000;
 #else
-static uint32_t g_TimeSyncMinAdjust = 100;
+ #if RT_OS_WINDOWS
+  /** Process token. */
+  static HANDLE g_hTokenProcess = NULL;
+  /* Old token privileges. */
+  static TOKEN_PRIVILEGES g_tpOld;
+  static uint32_t g_TimeSyncMinAdjust = 100;
+ #else
+  static uint32_t g_TimeSyncMinAdjust = 100;
+ #endif
 #endif
 /** @see pg_vboxservice_timesync */
@@ -125 +133 @@
 /** The semaphore we're blocking on. */
 static RTSEMEVENTMULTI g_TimeSyncEvent = NIL_RTSEMEVENTMULTI;
-
 
 /** @copydoc VBOXSERVICE::pfnPreInit */
@@ -159 +166 @@
 static DECLCALLBACK(int) VBoxServiceTimeSyncInit(void)
 {
+    int rc = VINF_SUCCESS;
+
     /*
      * If not specified, find the right interval default.
@@ -168 +177 @@
         g_TimeSyncInterval = 10 * 1000;
 
-    int rc = RTSemEventMultiCreate(&g_TimeSyncEvent);
+    rc = RTSemEventMultiCreate(&g_TimeSyncEvent);
     AssertRC(rc);
+
+#if defined(RT_OS_WINDOWS)
+    /* Adjust priviledges of this process to adjust the time. */
+    TOKEN_PRIVILEGES tp; /* Token provileges. */
+    DWORD dwSize = sizeof (TOKEN_PRIVILEGES);
+    LUID luid = {0};
+
+    if (!OpenProcessToken(GetCurrentProcess(),
+                          TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &g_hTokenProcess))
+    {
+        VBoxServiceError("Opening process token (SE_SYSTEMTIME_NAME) failed with code %ld!\n", GetLastError());
+        rc = VERR_PERMISSION_DENIED;
+    }
+    else
+    {
+        if(!::LookupPrivilegeValue(NULL, SE_SYSTEMTIME_NAME, &luid))
+        {
+            VBoxServiceError("Looking up token privileges (SE_SYSTEMTIME_NAME) failed with code %ld!\n", GetLastError());
+            rc = VERR_PERMISSION_DENIED;
+        }
+
+        ZeroMemory (&tp, sizeof (tp));
+        tp.PrivilegeCount = 1;
+        tp.Privileges[0].Luid = luid;
+        tp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
+
+        /* Adjust Token privileges. */
+        if (!::AdjustTokenPrivileges(g_hTokenProcess, FALSE, &tp, sizeof(TOKEN_PRIVILEGES),
+                 &g_tpOld, &dwSize))
+        {
+           VBoxServiceError("Adjusting token privileges (SE_SYSTEMTIME_NAME) failed with code %ld!\n", GetLastError());
+           rc = VERR_PERMISSION_DENIED;
+        }
+    }
+#else
+    /* Nothing to do here yet. */
+#endif
+
+    if (RT_FAILURE(rc))
+    {
+        CloseHandle (g_hTokenProcess);
+        g_hTokenProcess = NULL;
+    }
+
     return rc;
 }
@@ -236 +289 @@
                      * *NIX systems have it. Fall back on settimeofday.
                      */
-#ifdef RT_OS_WINDOWS
+#if defined(RT_OS_WINDOWS)
+
+
                     /* Just make sure it compiles for now, but later:
                      SetSystemTimeAdjustment and fall back on SetSystemTime.
                      */
-                    AssertFatalFailed();
+                    //AssertFatalFailed();
 #else
                     struct timeval tv;
-# if !defined(RT_OS_OS2) /* PORTME */
+#if !defined(RT_OS_OS2) /* PORTME */
                     RTTimeSpecGetTimeval(&Drift, &tv);
                     if (adjtime(&tv, NULL) == 0)
@@ -252 +307 @@
                     }
                     else
-# endif
+#endif
                     {
                         errno = 0;
@@ -264 +319 @@
                                     VBoxServiceVerbose(1, "settimeofday to %s\n",
                                                        RTTimeToString(RTTimeExplode(&Time, &Tmp), sz, sizeof(sz)));
-# ifdef DEBUG
+#ifdef DEBUG
                                 if (g_cVerbosity >= 3)
                                     VBoxServiceVerbose(2, "       new time %s\n",
                                                        RTTimeToString(RTTimeExplode(&Time, RTTimeNow(&Tmp)), sz, sizeof(sz)));
-# endif
+#endif
                                 cErrors = 0;
                             }
@@ -320 +375 @@
 static DECLCALLBACK(void) VBoxServiceTimeSyncTerm(void)
 {
+#if defined(RT_OS_WINDOWS)
+    /* Disable SE_SYSTEMTIME_NAME again. */
+    DWORD dwSize = sizeof (TOKEN_PRIVILEGES);
+    if (g_hTokenProcess && !::AdjustTokenPrivileges(g_hTokenProcess, FALSE, &g_tpOld, dwSize, NULL, NULL))
+        VBoxServiceError("Adjusting back token privileges (SE_SYSTEMTIME_NAME) failed with code %ld!\n", GetLastError());
+#endif
+
     RTSemEventMultiDestroy(g_TimeSyncEvent);
     g_TimeSyncEvent = NIL_RTSEMEVENTMULTI;