2 Samba Unix/Linux SMB client utility profiles.c
4 Copyright (C) Richard Sharpe, <rsharpe@richardsharpe.com> 2002
5 Copyright (C) Jelmer Vernooij (conversion to popt) 2003
6 Copyright (C) Gerald (Jerry) Carter 2005
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 #include "reg_objects.h"
26 /* GLOBAL VARIABLES */
28 struct dom_sid old_sid, new_sid;
29 int change = 0, new_val = 0;
30 int opt_verbose = False;
32 /********************************************************************
33 ********************************************************************/
35 static void verbose_output(const char *format, ...) PRINTF_ATTRIBUTE(1,2);
36 static void verbose_output(const char *format, ...)
45 va_start(args, format);
46 if ((vasprintf(&var, format, args)) == -1) {
51 fprintf(stdout, "%s", var);
56 /********************************************************************
57 ********************************************************************/
59 static bool swap_sid_in_acl( struct security_descriptor *sd, struct dom_sid *s1, struct dom_sid *s2 )
61 struct security_acl *theacl;
65 verbose_output(" Owner SID: %s\n", sid_string_tos(sd->owner_sid));
66 if ( sid_equal( sd->owner_sid, s1 ) ) {
67 sid_copy( sd->owner_sid, s2 );
69 verbose_output(" New Owner SID: %s\n",
70 sid_string_tos(sd->owner_sid));
74 verbose_output(" Group SID: %s\n", sid_string_tos(sd->group_sid));
75 if ( sid_equal( sd->group_sid, s1 ) ) {
76 sid_copy( sd->group_sid, s2 );
78 verbose_output(" New Group SID: %s\n",
79 sid_string_tos(sd->group_sid));
83 verbose_output(" DACL: %d entries:\n", theacl->num_aces);
84 for ( i=0; i<theacl->num_aces; i++ ) {
85 verbose_output(" Trustee SID: %s\n",
86 sid_string_tos(&theacl->aces[i].trustee));
87 if ( sid_equal( &theacl->aces[i].trustee, s1 ) ) {
88 sid_copy( &theacl->aces[i].trustee, s2 );
90 verbose_output(" New Trustee SID: %s\n",
91 sid_string_tos(&theacl->aces[i].trustee));
97 verbose_output(" SACL: %d entries: \n", theacl->num_aces);
98 for ( i=0; i<theacl->num_aces; i++ ) {
99 verbose_output(" Trustee SID: %s\n",
100 sid_string_tos(&theacl->aces[i].trustee));
101 if ( sid_equal( &theacl->aces[i].trustee, s1 ) ) {
102 sid_copy( &theacl->aces[i].trustee, s2 );
104 verbose_output(" New Trustee SID: %s\n",
105 sid_string_tos(&theacl->aces[i].trustee));
112 /********************************************************************
113 ********************************************************************/
115 static bool copy_registry_tree( REGF_FILE *infile, REGF_NK_REC *nk,
116 REGF_NK_REC *parent, REGF_FILE *outfile,
117 const char *parentpath )
119 REGF_NK_REC *key, *subkey;
120 struct security_descriptor *new_sd;
121 struct regval_ctr *values;
122 struct regsubkey_ctr *subkeys;
127 /* swap out the SIDs in the security descriptor */
129 if ( !(new_sd = dup_sec_desc( outfile->mem_ctx, nk->sec_desc->sec_desc )) ) {
130 fprintf( stderr, "Failed to copy security descriptor!\n" );
134 verbose_output("ACL for %s%s%s\n", parentpath, parent ? "\\" : "", nk->keyname);
135 swap_sid_in_acl( new_sd, &old_sid, &new_sid );
137 werr = regsubkey_ctr_init(NULL, &subkeys);
138 if (!W_ERROR_IS_OK(werr)) {
139 DEBUG(0,("copy_registry_tree: talloc() failure!\n"));
143 werr = regval_ctr_init(subkeys, &values);
144 if (!W_ERROR_IS_OK(werr)) {
145 TALLOC_FREE( subkeys );
146 DEBUG(0,("copy_registry_tree: talloc() failure!\n"));
150 /* copy values into the struct regval_ctr */
152 for ( i=0; i<nk->num_values; i++ ) {
153 regval_ctr_addvalue( values, nk->values[i].valuename, nk->values[i].type,
154 nk->values[i].data, (nk->values[i].data_size & ~VK_DATA_IN_OFFSET) );
157 /* copy subkeys into the struct regsubkey_ctr */
159 while ( (subkey = regfio_fetch_subkey( infile, nk )) ) {
160 regsubkey_ctr_addkey( subkeys, subkey->keyname );
163 key = regfio_write_key( outfile, nk->keyname, values, subkeys, new_sd, parent );
165 /* write each one of the subkeys out */
167 path = talloc_asprintf(subkeys, "%s%s%s",
168 parentpath, parent ? "\\" : "",nk->keyname);
170 TALLOC_FREE( subkeys );
174 nk->subkey_index = 0;
175 while ((subkey = regfio_fetch_subkey(infile, nk))) {
176 if (!copy_registry_tree( infile, subkey, key, outfile, path)) {
177 TALLOC_FREE(subkeys);
182 /* values is a talloc()'d child of subkeys here so just throw it all away */
184 TALLOC_FREE( subkeys );
186 verbose_output("[%s]\n", path);
191 /*********************************************************************
192 *********************************************************************/
194 int main( int argc, char *argv[] )
196 TALLOC_CTX *frame = talloc_stackframe();
198 REGF_FILE *infile, *outfile;
200 char *orig_filename, *new_filename;
201 struct poptOption long_options[] = {
203 { "change-sid", 'c', POPT_ARG_STRING, NULL, 'c', "Provides SID to change" },
204 { "new-sid", 'n', POPT_ARG_STRING, NULL, 'n', "Provides SID to change to" },
205 { "verbose", 'v', POPT_ARG_NONE, &opt_verbose, 'v', "Verbose output" },
214 /* setup logging options */
216 setup_logging( "profiles", True );
218 x_setbuf( x_stderr, NULL );
220 pc = poptGetContext("profiles", argc, (const char **)argv, long_options,
221 POPT_CONTEXT_KEEP_FIRST);
223 poptSetOtherOptionHelp(pc, "<profilefile>");
225 /* Now, process the arguments */
227 while ((opt = poptGetNextOpt(pc)) != -1) {
231 if (!string_to_sid(&old_sid, poptGetOptArg(pc))) {
232 fprintf(stderr, "Argument to -c should be a SID in form of S-1-5-...\n");
233 poptPrintUsage(pc, stderr, 0);
240 if (!string_to_sid(&new_sid, poptGetOptArg(pc))) {
241 fprintf(stderr, "Argument to -n should be a SID in form of S-1-5-...\n");
242 poptPrintUsage(pc, stderr, 0);
252 if (!poptPeekArg(pc)) {
253 poptPrintUsage(pc, stderr, 0);
257 if ((!change && new_val) || (change && !new_val)) {
258 fprintf(stderr, "You must specify both -c and -n if one or the other is set!\n");
259 poptPrintUsage(pc, stderr, 0);
263 orig_filename = talloc_strdup(frame, poptPeekArg(pc));
264 if (!orig_filename) {
267 new_filename = talloc_asprintf(frame,
274 if (!(infile = regfio_open( orig_filename, O_RDONLY, 0))) {
275 fprintf( stderr, "Failed to open %s!\n", orig_filename );
276 fprintf( stderr, "Error was (%s)\n", strerror(errno) );
280 if ( !(outfile = regfio_open( new_filename, (O_RDWR|O_CREAT|O_TRUNC), (S_IREAD|S_IWRITE) )) ) {
281 fprintf( stderr, "Failed to open new file %s!\n", new_filename );
282 fprintf( stderr, "Error was (%s)\n", strerror(errno) );
286 /* actually do the update now */
288 if ((nk = regfio_rootkey( infile )) == NULL) {
289 fprintf(stderr, "Could not get rootkey\n");
293 if (!copy_registry_tree( infile, nk, NULL, outfile, "")) {
294 fprintf(stderr, "Failed to write updated registry file!\n");
300 regfio_close(infile);
301 regfio_close(outfile);