jp9000/obs-studio
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

win-capture: Set ALL APPLICATION PACKAGES perms if elevated

Browse Source
This commit is contained in:
jp9000 2020-03-07 04:00:08 -08:00
parent e7b0a45126
commit 5dcad74019
1 changed files with 58 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

59
plugins/win-capture/game-capture-file-init.c
View File

@ -1,6 +1,7 @@
#include <windows.h>
#include <strsafe.h>
#include <shlobj.h>
#include <aclapi.h>
#include <obs-module.h>
#include <util/windows/win-version.h>
#include <util/platform.h>
@ -10,7 +11,7 @@
/* ------------------------------------------------------------------------- */
/* helper funcs */
static bool has_elevation()
static bool has_elevation_internal()
{
SID_IDENTIFIER_AUTHORITY sia = SECURITY_NT_AUTHORITY;
PSID sid = NULL;
@ -28,6 +29,57 @@ static bool has_elevation()
return elevated;
}
static bool has_elevation()
{
static bool elevated = false;
static bool initialized = false;
if (!initialized) {
elevated = has_elevation_internal();
initialized = true;
}
return elevated;
}
static bool add_aap_perms(const wchar_t *dir)
{
PSECURITY_DESCRIPTOR sd = NULL;
PACL new_dacl = NULL;
bool success = false;
PACL dacl;
if (GetNamedSecurityInfoW(dir, SE_FILE_OBJECT,
DACL_SECURITY_INFORMATION, NULL, NULL, &dacl,
NULL, &sd) != ERROR_SUCCESS) {
goto fail;
}
EXPLICIT_ACCESSW ea = {0};
ea.grfAccessPermissions = GENERIC_READ | GENERIC_EXECUTE | SYNCHRONIZE;
ea.grfAccessMode = GRANT_ACCESS;
ea.grfInheritance = SUB_CONTAINERS_AND_OBJECTS_INHERIT;
ea.Trustee.TrusteeForm = TRUSTEE_IS_NAME;
ea.Trustee.ptstrName = L"ALL APPLICATION PACKAGES";
if (SetEntriesInAclW(1, &ea, dacl, &new_dacl) != ERROR_SUCCESS) {
goto fail;
}
if (SetNamedSecurityInfoW((wchar_t *)dir, SE_FILE_OBJECT,
DACL_SECURITY_INFORMATION, NULL, NULL,
new_dacl, NULL) != ERROR_SUCCESS) {
goto fail;
}
success = true;
fail:
if (sd)
LocalFree(sd);
if (new_dacl)
LocalFree(new_dacl);
return success;
}
static inline bool file_exists(const wchar_t *path)
{
WIN32_FIND_DATAW wfd;
@ -137,6 +189,8 @@ static bool update_hook_file(bool b64)
}
if (!file_exists(dst) || !file_exists(dst_json)) {
CreateDirectoryW(temp, NULL);
if (has_elevation())
add_aap_perms(temp);
if (!CopyFileW(src_json, dst_json, false))
return false;
if (!CopyFileW(src, dst, false))
@ -144,6 +198,9 @@ static bool update_hook_file(bool b64)
return true;
}
if (has_elevation())
add_aap_perms(temp);
struct win_version_info ver_src = {0};
struct win_version_info ver_dst = {0};
if (!get_dll_ver(src, &ver_src))