source3/registry/reg_api.c

   1 /*
   2  *  Unix SMB/CIFS implementation.
   3  *  Virtual Windows Registry Layer
   4  *  Copyright (C) Volker Lendecke 2006
   5  *  Copyright (C) Michael Adam 2007-2010
   6  *
   7  *  This program is free software; you can redistribute it and/or modify
   8  *  it under the terms of the GNU General Public License as published by
   9  *  the Free Software Foundation; either version 3 of the License, or
  10  *  (at your option) any later version.
  11  *
  12  *  This program is distributed in the hope that it will be useful,
  13  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  *  GNU General Public License for more details.
  16  *
  17  *  You should have received a copy of the GNU General Public License
  18  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
  19  */
  20
  21 /* Attempt to wrap the existing API in a more winreg.idl-like way */
  22
  23 /*
  24  * Here is a list of winreg.idl functions and corresponding implementations
  25  * provided here:
  26  *
  27  * 0x00         winreg_OpenHKCR
  28  * 0x01         winreg_OpenHKCU
  29  * 0x02         winreg_OpenHKLM
  30  * 0x03         winreg_OpenHKPD
  31  * 0x04         winreg_OpenHKU
  32  * 0x05         winreg_CloseKey
  33  * 0x06         winreg_CreateKey                        reg_createkey
  34  * 0x07         winreg_DeleteKey                        reg_deletekey
  35  * 0x08         winreg_DeleteValue                      reg_deletevalue
  36  * 0x09         winreg_EnumKey                          reg_enumkey
  37  * 0x0a         winreg_EnumValue                        reg_enumvalue
  38  * 0x0b         winreg_FlushKey
  39  * 0x0c         winreg_GetKeySecurity                   reg_getkeysecurity
  40  * 0x0d         winreg_LoadKey
  41  * 0x0e         winreg_NotifyChangeKeyValue
  42  * 0x0f         winreg_OpenKey                          reg_openkey
  43  * 0x10         winreg_QueryInfoKey                     reg_queryinfokey
  44  * 0x11         winreg_QueryValue                       reg_queryvalue
  45  * 0x12         winreg_ReplaceKey
  46  * 0x13         winreg_RestoreKey                       reg_restorekey
  47  * 0x14         winreg_SaveKey                          reg_savekey
  48  * 0x15         winreg_SetKeySecurity                   reg_setkeysecurity
  49  * 0x16         winreg_SetValue                         reg_setvalue
  50  * 0x17         winreg_UnLoadKey
  51  * 0x18         winreg_InitiateSystemShutdown
  52  * 0x19         winreg_AbortSystemShutdown
  53  * 0x1a         winreg_GetVersion                       reg_getversion
  54  * 0x1b         winreg_OpenHKCC
  55  * 0x1c         winreg_OpenHKDD
  56  * 0x1d         winreg_QueryMultipleValues              reg_querymultiplevalues
  57  * 0x1e         winreg_InitiateSystemShutdownEx
  58  * 0x1f         winreg_SaveKeyEx
  59  * 0x20         winreg_OpenHKPT
  60  * 0x21         winreg_OpenHKPN
  61  * 0x22         winreg_QueryMultipleValues2             reg_querymultiplevalues
  62  *
  63  */
  64
  65 #include "includes.h"
  66 #include "registry.h"
  67 #include "reg_api.h"
  68 #include "reg_cachehook.h"
  69 #include "reg_util_internal.h"
  70 #include "reg_backend_db.h"
  71 #include "reg_dispatcher.h"
  72 #include "reg_objects.h"
  73 #include "../librpc/gen_ndr/ndr_security.h"
  74
  75 #undef DBGC_CLASS
  76 #define DBGC_CLASS DBGC_REGISTRY
  77
  78
  79 /**********************************************************************
  80  * Helper functions
  81  **********************************************************************/
  82
  83 static WERROR fill_value_cache(struct registry_key *key)
  84 {
  85         WERROR werr;
  86
  87         if (key->values != NULL) {
  88                 if (!reg_values_need_update(key->key, key->values)) {
  89                         return WERR_OK;
  90                 }
  91         }
  92
  93         werr = regval_ctr_init(key, &(key->values));
  94         W_ERROR_NOT_OK_RETURN(werr);
  95
  96         if (fetch_reg_values(key->key, key->values) == -1) {
  97                 TALLOC_FREE(key->values);
  98                 return WERR_BADFILE;
  99         }
 100
 101         return WERR_OK;
 102 }
 103
 104 static WERROR fill_subkey_cache(struct registry_key *key)
 105 {
 106         WERROR werr;
 107
 108         if (key->subkeys != NULL) {
 109                 if (!reg_subkeys_need_update(key->key, key->subkeys)) {
 110                         return WERR_OK;
 111                 }
 112         }
 113
 114         werr = regsubkey_ctr_init(key, &(key->subkeys));
 115         W_ERROR_NOT_OK_RETURN(werr);
 116
 117         if (fetch_reg_keys(key->key, key->subkeys) == -1) {
 118                 TALLOC_FREE(key->subkeys);
 119                 return WERR_NO_MORE_ITEMS;
 120         }
 121
 122         return WERR_OK;
 123 }
 124
 125 static int regkey_destructor(struct registry_key_handle *key)
 126 {
 127         return regdb_close();
 128 }
 129
 130 static WERROR regkey_open_onelevel(TALLOC_CTX *mem_ctx,
 131                                    struct registry_key *parent,
 132                                    const char *name,
 133                                    const struct security_token *token,
 134                                    uint32 access_desired,
 135                                    struct registry_key **pregkey)
 136 {
 137         WERROR          result = WERR_OK;
 138         struct registry_key *regkey;
 139         struct registry_key_handle *key;
 140         struct regsubkey_ctr    *subkeys = NULL;
 141
 142         DEBUG(7,("regkey_open_onelevel: name = [%s]\n", name));
 143
 144         SMB_ASSERT(strchr(name, '\\') == NULL);
 145
 146         if (!(regkey = TALLOC_ZERO_P(mem_ctx, struct registry_key)) ||
 147             !(regkey->token = dup_nt_token(regkey, token)) ||
 148             !(regkey->key = TALLOC_ZERO_P(regkey, struct registry_key_handle)))
 149         {
 150                 result = WERR_NOMEM;
 151                 goto done;
 152         }
 153
 154         if ( !(W_ERROR_IS_OK(result = regdb_open())) ) {
 155                 goto done;
 156         }
 157
 158         key = regkey->key;
 159         talloc_set_destructor(key, regkey_destructor);
 160
 161         /* initialization */
 162
 163         key->type = REG_KEY_GENERIC;
 164
 165         if (name[0] == '\0') {
 166                 /*
 167                  * Open a copy of the parent key
 168                  */
 169                 if (!parent) {
 170                         result = WERR_BADFILE;
 171                         goto done;
 172                 }
 173                 key->name = talloc_strdup(key, parent->key->name);
 174         }
 175         else {
 176                 /*
 177                  * Normal subkey open
 178                  */
 179                 key->name = talloc_asprintf(key, "%s%s%s",
 180                                             parent ? parent->key->name : "",
 181                                             parent ? "\\": "",
 182                                             name);
 183         }
 184
 185         if (key->name == NULL) {
 186                 result = WERR_NOMEM;
 187                 goto done;
 188         }
 189
 190         /* Tag this as a Performance Counter Key */
 191
 192         if( StrnCaseCmp(key->name, KEY_HKPD, strlen(KEY_HKPD)) == 0 )
 193                 key->type = REG_KEY_HKPD;
 194
 195         /* Look up the table of registry I/O operations */
 196
 197         if ( !(key->ops = reghook_cache_find( key->name )) ) {
 198                 DEBUG(0,("reg_open_onelevel: Failed to assign "
 199                          "registry_ops to [%s]\n", key->name ));
 200                 result = WERR_BADFILE;
 201                 goto done;
 202         }
 203
 204         /* check if the path really exists; failed is indicated by -1 */
 205         /* if the subkey count failed, bail out */
 206
 207         result = regsubkey_ctr_init(key, &subkeys);
 208         if (!W_ERROR_IS_OK(result)) {
 209                 goto done;
 210         }
 211
 212         if ( fetch_reg_keys( key, subkeys ) == -1 )  {
 213                 result = WERR_BADFILE;
 214                 goto done;
 215         }
 216
 217         TALLOC_FREE( subkeys );
 218
 219         if ( !regkey_access_check( key, access_desired, &key->access_granted,
 220                                    token ) ) {
 221                 result = WERR_ACCESS_DENIED;
 222                 goto done;
 223         }
 224
 225         *pregkey = regkey;
 226         result = WERR_OK;
 227
 228 done:
 229         if ( !W_ERROR_IS_OK(result) ) {
 230                 TALLOC_FREE(regkey);
 231         }
 232
 233         return result;
 234 }
 235
 236 WERROR reg_openhive(TALLOC_CTX *mem_ctx, const char *hive,
 237                     uint32 desired_access,
 238                     const struct security_token *token,
 239                     struct registry_key **pkey)
 240 {
 241         SMB_ASSERT(hive != NULL);
 242         SMB_ASSERT(hive[0] != '\0');
 243         SMB_ASSERT(strchr(hive, '\\') == NULL);
 244
 245         return regkey_open_onelevel(mem_ctx, NULL, hive, token, desired_access,
 246                                     pkey);
 247 }
 248
 249
 250 /**********************************************************************
 251  * The API functions
 252  **********************************************************************/
 253
 254 WERROR reg_openkey(TALLOC_CTX *mem_ctx, struct registry_key *parent,
 255                    const char *name, uint32 desired_access,
 256                    struct registry_key **pkey)
 257 {
 258         struct registry_key *direct_parent = parent;
 259         WERROR err;
 260         char *p, *path, *to_free;
 261         size_t len;
 262
 263         if (!(path = SMB_STRDUP(name))) {
 264                 return WERR_NOMEM;
 265         }
 266         to_free = path;
 267
 268         len = strlen(path);
 269
 270         if ((len > 0) && (path[len-1] == '\\')) {
 271                 path[len-1] = '\0';
 272         }
 273
 274         while ((p = strchr(path, '\\')) != NULL) {
 275                 char *name_component;
 276                 struct registry_key *tmp;
 277
 278                 if (!(name_component = SMB_STRNDUP(path, (p - path)))) {
 279                         err = WERR_NOMEM;
 280                         goto error;
 281                 }
 282
 283                 err = regkey_open_onelevel(mem_ctx, direct_parent,
 284                                            name_component, parent->token,
 285                                            KEY_ENUMERATE_SUB_KEYS, &tmp);
 286                 SAFE_FREE(name_component);
 287
 288                 if (!W_ERROR_IS_OK(err)) {
 289                         goto error;
 290                 }
 291                 if (direct_parent != parent) {
 292                         TALLOC_FREE(direct_parent);
 293                 }
 294
 295                 direct_parent = tmp;
 296                 path = p+1;
 297         }
 298
 299         err = regkey_open_onelevel(mem_ctx, direct_parent, path, parent->token,
 300                                    desired_access, pkey);
 301  error:
 302         if (direct_parent != parent) {
 303                 TALLOC_FREE(direct_parent);
 304         }
 305         SAFE_FREE(to_free);
 306         return err;
 307 }
 308
 309 WERROR reg_enumkey(TALLOC_CTX *mem_ctx, struct registry_key *key,
 310                    uint32 idx, char **name, NTTIME *last_write_time)
 311 {
 312         WERROR err;
 313
 314         if (!(key->key->access_granted & KEY_ENUMERATE_SUB_KEYS)) {
 315                 return WERR_ACCESS_DENIED;
 316         }
 317
 318         if (!W_ERROR_IS_OK(err = fill_subkey_cache(key))) {
 319                 return err;
 320         }
 321
 322         if (idx >= regsubkey_ctr_numkeys(key->subkeys)) {
 323                 return WERR_NO_MORE_ITEMS;
 324         }
 325
 326         if (!(*name = talloc_strdup(mem_ctx,
 327                         regsubkey_ctr_specific_key(key->subkeys, idx))))
 328         {
 329                 return WERR_NOMEM;
 330         }
 331
 332         if (last_write_time) {
 333                 *last_write_time = 0;
 334         }
 335
 336         return WERR_OK;
 337 }
 338
 339 WERROR reg_enumvalue(TALLOC_CTX *mem_ctx, struct registry_key *key,
 340                      uint32 idx, char **pname, struct registry_value **pval)
 341 {
 342         struct registry_value *val;
 343         struct regval_blob *blob;
 344         WERROR err;
 345
 346         if (!(key->key->access_granted & KEY_QUERY_VALUE)) {
 347                 return WERR_ACCESS_DENIED;
 348         }
 349
 350         if (!(W_ERROR_IS_OK(err = fill_value_cache(key)))) {
 351                 return err;
 352         }
 353
 354         if (idx >= regval_ctr_numvals(key->values)) {
 355                 return WERR_NO_MORE_ITEMS;
 356         }
 357
 358         blob = regval_ctr_specific_value(key->values, idx);
 359
 360         val = talloc_zero(mem_ctx, struct registry_value);
 361         if (val == NULL) {
 362                 return WERR_NOMEM;
 363         }
 364
 365         val->type = regval_type(blob);
 366         val->data = data_blob_talloc(mem_ctx, regval_data_p(blob), regval_size(blob));
 367
 368         if (pname
 369             && !(*pname = talloc_strdup(
 370                          mem_ctx, regval_name(blob)))) {
 371                 TALLOC_FREE(val);
 372                 return WERR_NOMEM;
 373         }
 374
 375         *pval = val;
 376         return WERR_OK;
 377 }
 378
 379 WERROR reg_queryvalue(TALLOC_CTX *mem_ctx, struct registry_key *key,
 380                       const char *name, struct registry_value **pval)
 381 {
 382         WERROR err;
 383         uint32 i;
 384
 385         if (!(key->key->access_granted & KEY_QUERY_VALUE)) {
 386                 return WERR_ACCESS_DENIED;
 387         }
 388
 389         if (!(W_ERROR_IS_OK(err = fill_value_cache(key)))) {
 390                 return err;
 391         }
 392
 393         for (i=0; i < regval_ctr_numvals(key->values); i++) {
 394                 struct regval_blob *blob;
 395                 blob = regval_ctr_specific_value(key->values, i);
 396                 if (strequal(regval_name(blob), name)) {
 397                         return reg_enumvalue(mem_ctx, key, i, NULL, pval);
 398                 }
 399         }
 400
 401         return WERR_BADFILE;
 402 }
 403
 404 WERROR reg_querymultiplevalues(TALLOC_CTX *mem_ctx,
 405                                struct registry_key *key,
 406                                uint32_t num_names,
 407                                const char **names,
 408                                uint32_t *pnum_vals,
 409                                struct registry_value **pvals)
 410 {
 411         WERROR err;
 412         uint32_t i, n, found = 0;
 413         struct registry_value *vals;
 414
 415         if (num_names == 0) {
 416                 return WERR_OK;
 417         }
 418
 419         if (!(key->key->access_granted & KEY_QUERY_VALUE)) {
 420                 return WERR_ACCESS_DENIED;
 421         }
 422
 423         if (!(W_ERROR_IS_OK(err = fill_value_cache(key)))) {
 424                 return err;
 425         }
 426
 427         vals = talloc_zero_array(mem_ctx, struct registry_value, num_names);
 428         if (vals == NULL) {
 429                 return WERR_NOMEM;
 430         }
 431
 432         for (n=0; n < num_names; n++) {
 433                 for (i=0; i < regval_ctr_numvals(key->values); i++) {
 434                         struct regval_blob *blob;
 435                         blob = regval_ctr_specific_value(key->values, i);
 436                         if (strequal(regval_name(blob), names[n])) {
 437                                 struct registry_value *v;
 438                                 err = reg_enumvalue(mem_ctx, key, i, NULL, &v);
 439                                 if (!W_ERROR_IS_OK(err)) {
 440                                         return err;
 441                                 }
 442                                 vals[n] = *v;
 443                                 found++;
 444                         }
 445                 }
 446         }
 447
 448         *pvals = vals;
 449         *pnum_vals = found;
 450
 451         return WERR_OK;
 452 }
 453
 454 WERROR reg_queryinfokey(struct registry_key *key, uint32_t *num_subkeys,
 455                         uint32_t *max_subkeylen, uint32_t *max_subkeysize,
 456                         uint32_t *num_values, uint32_t *max_valnamelen,
 457                         uint32_t *max_valbufsize, uint32_t *secdescsize,
 458                         NTTIME *last_changed_time)
 459 {
 460         uint32 i, max_size;
 461         size_t max_len;
 462         TALLOC_CTX *mem_ctx;
 463         WERROR err;
 464         struct security_descriptor *secdesc;
 465
 466         if (!(key->key->access_granted & KEY_QUERY_VALUE)) {
 467                 return WERR_ACCESS_DENIED;
 468         }
 469
 470         if (!W_ERROR_IS_OK(fill_subkey_cache(key)) ||
 471             !W_ERROR_IS_OK(fill_value_cache(key))) {
 472                 return WERR_BADFILE;
 473         }
 474
 475         max_len = 0;
 476         for (i=0; i< regsubkey_ctr_numkeys(key->subkeys); i++) {
 477                 max_len = MAX(max_len,
 478                         strlen(regsubkey_ctr_specific_key(key->subkeys, i)));
 479         }
 480
 481         *num_subkeys = regsubkey_ctr_numkeys(key->subkeys);
 482         *max_subkeylen = max_len;
 483         *max_subkeysize = 0;    /* Class length? */
 484
 485         max_len = 0;
 486         max_size = 0;
 487         for (i=0; i < regval_ctr_numvals(key->values); i++) {
 488                 struct regval_blob *blob;
 489                 blob = regval_ctr_specific_value(key->values, i);
 490                 max_len = MAX(max_len, strlen(regval_name(blob)));
 491                 max_size = MAX(max_size, regval_size(blob));
 492         }
 493
 494         *num_values = regval_ctr_numvals(key->values);
 495         *max_valnamelen = max_len;
 496         *max_valbufsize = max_size;
 497
 498         if (!(mem_ctx = talloc_new(key))) {
 499                 return WERR_NOMEM;
 500         }
 501
 502         err = regkey_get_secdesc(mem_ctx, key->key, &secdesc);
 503         if (!W_ERROR_IS_OK(err)) {
 504                 TALLOC_FREE(mem_ctx);
 505                 return err;
 506         }
 507
 508         *secdescsize = ndr_size_security_descriptor(secdesc, 0);
 509         TALLOC_FREE(mem_ctx);
 510
 511         *last_changed_time = 0;
 512
 513         return WERR_OK;
 514 }
 515
 516 WERROR reg_createkey(TALLOC_CTX *ctx, struct registry_key *parent,
 517                      const char *subkeypath, uint32 desired_access,
 518                      struct registry_key **pkey,
 519                      enum winreg_CreateAction *paction)
 520 {
 521         struct registry_key *key = parent;
 522         struct registry_key *create_parent;
 523         TALLOC_CTX *mem_ctx;
 524         char *path, *end;
 525         WERROR err;
 526
 527         if (!(mem_ctx = talloc_new(ctx))) return WERR_NOMEM;
 528
 529         if (!(path = talloc_strdup(mem_ctx, subkeypath))) {
 530                 err = WERR_NOMEM;
 531                 goto done;
 532         }
 533
 534         while ((end = strchr(path, '\\')) != NULL) {
 535                 struct registry_key *tmp;
 536                 enum winreg_CreateAction action;
 537
 538                 *end = '\0';
 539
 540                 err = reg_createkey(mem_ctx, key, path,
 541                                     KEY_ENUMERATE_SUB_KEYS, &tmp, &action);
 542                 if (!W_ERROR_IS_OK(err)) {
 543                         goto done;
 544                 }
 545
 546                 if (key != parent) {
 547                         TALLOC_FREE(key);
 548                 }
 549
 550                 key = tmp;
 551                 path = end+1;
 552         }
 553
 554         /*
 555          * At this point, "path" contains the one-element subkey of "key". We
 556          * can try to open it.
 557          */
 558
 559         err = reg_openkey(ctx, key, path, desired_access, pkey);
 560         if (W_ERROR_IS_OK(err)) {
 561                 if (paction != NULL) {
 562                         *paction = REG_OPENED_EXISTING_KEY;
 563                 }
 564                 goto done;
 565         }
 566
 567         if (!W_ERROR_EQUAL(err, WERR_BADFILE)) {
 568                 /*
 569                  * Something but "notfound" has happened, so bail out
 570                  */
 571                 goto done;
 572         }
 573
 574         /*
 575          * We have to make a copy of the current key, as we opened it only
 576          * with ENUM_SUBKEY access.
 577          */
 578
 579         err = reg_openkey(mem_ctx, key, "", KEY_CREATE_SUB_KEY,
 580                           &create_parent);
 581         if (!W_ERROR_IS_OK(err)) {
 582                 goto done;
 583         }
 584
 585         /*
 586          * Actually create the subkey
 587          */
 588
 589         err = fill_subkey_cache(create_parent);
 590         if (!W_ERROR_IS_OK(err)) goto done;
 591
 592         err = create_reg_subkey(key->key, path);
 593         W_ERROR_NOT_OK_GOTO_DONE(err);
 594
 595         /*
 596          * Now open the newly created key
 597          */
 598
 599         err = reg_openkey(ctx, create_parent, path, desired_access, pkey);
 600         if (W_ERROR_IS_OK(err) && (paction != NULL)) {
 601                 *paction = REG_CREATED_NEW_KEY;
 602         }
 603
 604  done:
 605         TALLOC_FREE(mem_ctx);
 606         return err;
 607 }
 608
 609 WERROR reg_deletekey(struct registry_key *parent, const char *path)
 610 {
 611         WERROR err;
 612         char *name, *end;
 613         struct registry_key *tmp_key, *key;
 614         TALLOC_CTX *mem_ctx = talloc_stackframe();
 615
 616         name = talloc_strdup(mem_ctx, path);
 617         if (name == NULL) {
 618                 err = WERR_NOMEM;
 619                 goto done;
 620         }
 621
 622         /* check if the key has subkeys */
 623         err = reg_openkey(mem_ctx, parent, name, REG_KEY_READ, &key);
 624         W_ERROR_NOT_OK_GOTO_DONE(err);
 625
 626         err = fill_subkey_cache(key);
 627         W_ERROR_NOT_OK_GOTO_DONE(err);
 628
 629         if (regsubkey_ctr_numkeys(key->subkeys) > 0) {
 630                 err = WERR_ACCESS_DENIED;
 631                 goto done;
 632         }
 633
 634         /* no subkeys - proceed with delete */
 635         end = strrchr(name, '\\');
 636         if (end != NULL) {
 637                 *end = '\0';
 638
 639                 err = reg_openkey(mem_ctx, parent, name,
 640                                   KEY_CREATE_SUB_KEY, &tmp_key);
 641                 W_ERROR_NOT_OK_GOTO_DONE(err);
 642
 643                 parent = tmp_key;
 644                 name = end+1;
 645         }
 646
 647         if (name[0] == '\0') {
 648                 err = WERR_INVALID_PARAM;
 649                 goto done;
 650         }
 651
 652         err = delete_reg_subkey(parent->key, name);
 653
 654 done:
 655         TALLOC_FREE(mem_ctx);
 656         return err;
 657 }
 658
 659 WERROR reg_setvalue(struct registry_key *key, const char *name,
 660                     const struct registry_value *val)
 661 {
 662         WERROR err;
 663         int res;
 664
 665         if (!(key->key->access_granted & KEY_SET_VALUE)) {
 666                 return WERR_ACCESS_DENIED;
 667         }
 668
 669         if (!W_ERROR_IS_OK(err = fill_value_cache(key))) {
 670                 return err;
 671         }
 672
 673         res = regval_ctr_addvalue(key->values, name, val->type,
 674                                   val->data.data, val->data.length);
 675
 676         if (res == 0) {
 677                 TALLOC_FREE(key->values);
 678                 return WERR_NOMEM;
 679         }
 680
 681         if (!store_reg_values(key->key, key->values)) {
 682                 TALLOC_FREE(key->values);
 683                 return WERR_REG_IO_FAILURE;
 684         }
 685
 686         return WERR_OK;
 687 }
 688
 689 static WERROR reg_value_exists(struct registry_key *key, const char *name)
 690 {
 691         struct regval_blob *blob;
 692
 693         blob = regval_ctr_getvalue(key->values, name);
 694
 695         if (blob == NULL) {
 696                 return WERR_BADFILE;
 697         } else {
 698                 return WERR_OK;
 699         }
 700 }
 701
 702 WERROR reg_deletevalue(struct registry_key *key, const char *name)
 703 {
 704         WERROR err;
 705
 706         if (!(key->key->access_granted & KEY_SET_VALUE)) {
 707                 return WERR_ACCESS_DENIED;
 708         }
 709
 710         if (!W_ERROR_IS_OK(err = fill_value_cache(key))) {
 711                 return err;
 712         }
 713
 714         err = reg_value_exists(key, name);
 715         if (!W_ERROR_IS_OK(err)) {
 716                 return err;
 717         }
 718
 719         regval_ctr_delvalue(key->values, name);
 720
 721         if (!store_reg_values(key->key, key->values)) {
 722                 TALLOC_FREE(key->values);
 723                 return WERR_REG_IO_FAILURE;
 724         }
 725
 726         return WERR_OK;
 727 }
 728
 729 WERROR reg_getkeysecurity(TALLOC_CTX *mem_ctx, struct registry_key *key,
 730                           struct security_descriptor **psecdesc)
 731 {
 732         return regkey_get_secdesc(mem_ctx, key->key, psecdesc);
 733 }
 734
 735 WERROR reg_setkeysecurity(struct registry_key *key,
 736                           struct security_descriptor *psecdesc)
 737 {
 738         return regkey_set_secdesc(key->key, psecdesc);
 739 }
 740
 741 WERROR reg_getversion(uint32_t *version)
 742 {
 743         if (version == NULL) {
 744                 return WERR_INVALID_PARAM;
 745         }
 746
 747         *version = 0x00000005; /* Windows 2000 registry API version */
 748         return WERR_OK;
 749 }
 750
 751 /**********************************************************************
 752  * Higher level utility functions
 753  **********************************************************************/
 754
 755 WERROR reg_deleteallvalues(struct registry_key *key)
 756 {
 757         WERROR err;
 758         int i;
 759
 760         if (!(key->key->access_granted & KEY_SET_VALUE)) {
 761                 return WERR_ACCESS_DENIED;
 762         }
 763
 764         if (!W_ERROR_IS_OK(err = fill_value_cache(key))) {
 765                 return err;
 766         }
 767
 768         for (i=0; i < regval_ctr_numvals(key->values); i++) {
 769                 struct regval_blob *blob;
 770                 blob = regval_ctr_specific_value(key->values, i);
 771                 regval_ctr_delvalue(key->values, regval_name(blob));
 772         }
 773
 774         if (!store_reg_values(key->key, key->values)) {
 775                 TALLOC_FREE(key->values);
 776                 return WERR_REG_IO_FAILURE;
 777         }
 778
 779         return WERR_OK;
 780 }
 781
 782 /*
 783  * Utility function to delete a registry key with all its subkeys.
 784  * Note that reg_deletekey returns ACCESS_DENIED when called on a
 785  * key that has subkeys.
 786  */
 787 static WERROR reg_deletekey_recursive_internal(struct registry_key *parent,
 788                                                const char *path,
 789                                                bool del_key)
 790 {
 791         WERROR werr = WERR_OK;
 792         struct registry_key *key;
 793         char *subkey_name = NULL;
 794         uint32 i;
 795         TALLOC_CTX *mem_ctx = talloc_stackframe();
 796
 797         /* recurse through subkeys first */
 798         werr = reg_openkey(mem_ctx, parent, path, REG_KEY_ALL, &key);
 799         if (!W_ERROR_IS_OK(werr)) {
 800                 goto done;
 801         }
 802
 803         werr = fill_subkey_cache(key);
 804         W_ERROR_NOT_OK_GOTO_DONE(werr);
 805
 806         /*
 807          * loop from top to bottom for perfomance:
 808          * this way, we need to rehash the regsubkey containers less
 809          */
 810         for (i = regsubkey_ctr_numkeys(key->subkeys) ; i > 0; i--) {
 811                 subkey_name = regsubkey_ctr_specific_key(key->subkeys, i-1);
 812                 werr = reg_deletekey_recursive_internal(key, subkey_name, true);
 813                 W_ERROR_NOT_OK_GOTO_DONE(werr);
 814         }
 815
 816         if (del_key) {
 817                 /* now delete the actual key */
 818                 werr = reg_deletekey(parent, path);
 819         }
 820
 821 done:
 822         TALLOC_FREE(mem_ctx);
 823         return werr;
 824 }
 825
 826 static WERROR reg_deletekey_recursive_trans(struct registry_key *parent,
 827                                             const char *path,
 828                                             bool del_key)
 829 {
 830         WERROR werr;
 831
 832         werr = regdb_transaction_start();
 833         if (!W_ERROR_IS_OK(werr)) {
 834                 DEBUG(0, ("reg_deletekey_recursive_trans: "
 835                           "error starting transaction: %s\n",
 836                           win_errstr(werr)));
 837                 return werr;
 838         }
 839
 840         werr = reg_deletekey_recursive_internal(parent, path, del_key);
 841
 842         if (!W_ERROR_IS_OK(werr)) {
 843                 WERROR werr2;
 844
 845                 DEBUG(1, (__location__ " failed to delete key '%s' from key "
 846                           "'%s': %s\n", path, parent->key->name,
 847                           win_errstr(werr)));
 848
 849                 werr2 = regdb_transaction_cancel();
 850                 if (!W_ERROR_IS_OK(werr2)) {
 851                         DEBUG(0, ("reg_deletekey_recursive_trans: "
 852                                   "error cancelling transaction: %s\n",
 853                                   win_errstr(werr2)));
 854                         /*
 855                          * return the original werr or the
 856                          * error from cancelling the transaction?
 857                          */
 858                 }
 859         } else {
 860                 werr = regdb_transaction_commit();
 861                 if (!W_ERROR_IS_OK(werr)) {
 862                         DEBUG(0, ("reg_deletekey_recursive_trans: "
 863                                   "error committing transaction: %s\n",
 864                                   win_errstr(werr)));
 865                 }
 866         }
 867
 868         return werr;
 869 }
 870
 871 WERROR reg_deletekey_recursive(struct registry_key *parent,
 872                                const char *path)
 873 {
 874         return reg_deletekey_recursive_trans(parent, path, true);
 875 }
 876
 877 WERROR reg_deletesubkeys_recursive(struct registry_key *parent,
 878                                    const char *path)
 879 {
 880         return reg_deletekey_recursive_trans(parent, path, false);
 881 }
 882