Class: Chef::ReservedNames::Win32::Security::Token

Inherits:
Object
  • Object
show all
Defined in:
lib/chef/win32/security/token.rb

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(handle) ⇒ Token

Returns a new instance of Token.



29
30
31
 
# File 'lib/chef/win32/security/token.rb', line 29

def initialize(handle)
  @handle = handle
end

Instance Attribute Details

#handle ⇒ Object (readonly)

Returns the value of attribute handle.



33
34
35
 
# File 'lib/chef/win32/security/token.rb', line 33

def handle
  @handle
end

Instance Method Details

#adjust_privileges(privileges_struct) ⇒ Object 



56
57
58
59
60
 
# File 'lib/chef/win32/security/token.rb', line 56

def adjust_privileges(privileges_struct)
  if privileges_struct[:PrivilegeCount] > 0
    Chef::ReservedNames::Win32::Security::adjust_token_privileges(self, privileges_struct)
  end
end

#enable_privileges(*privilege_names) ⇒ Object 



35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
 
# File 'lib/chef/win32/security/token.rb', line 35

def enable_privileges(*privilege_names)
  # Build the list of privileges we want to set
  new_privileges = Chef::ReservedNames::Win32::API::Security::TOKEN_PRIVILEGES.new(
    FFI::MemoryPointer.new(Chef::ReservedNames::Win32::API::Security::TOKEN_PRIVILEGES.size_with_privileges(privilege_names.length)))
  new_privileges[:PrivilegeCount] = 0
  privilege_names.each do |privilege_name|
    luid = Chef::ReservedNames::Win32::API::Security::LUID.new
    # Ignore failure (with_privileges TRIES but does not guarantee success--
    # APIs down the line will fail if privilege escalation fails)
    if Chef::ReservedNames::Win32::API::Security.LookupPrivilegeValueW(nil, privilege_name.to_wstring, luid)
      new_privilege = new_privileges.privilege(new_privileges[:PrivilegeCount])
      new_privilege[:Luid][:LowPart] = luid[:LowPart]
      new_privilege[:Luid][:HighPart] = luid[:HighPart]
      new_privilege[:Attributes] = Chef::ReservedNames::Win32::API::Security::SE_PRIVILEGE_ENABLED
      new_privileges[:PrivilegeCount] = new_privileges[:PrivilegeCount] + 1
    end
  end

  old_privileges = Chef::ReservedNames::Win32::Security.adjust_token_privileges(self, new_privileges)
end