102 lines
2.3 KiB
C
102 lines
2.3 KiB
C
//+-----------------------------------------------------------------------
|
|
//
|
|
// Microsoft Windows
|
|
//
|
|
// Copyright (c) Microsoft Corporation 2000
|
|
//
|
|
// File: A Z E V E N T . H
|
|
//
|
|
// Contents: Functions to construct and report Authz audit event
|
|
//
|
|
//
|
|
// History:
|
|
// 07-January-2000 kumarp created
|
|
//
|
|
//------------------------------------------------------------------------
|
|
|
|
#define AUTHZ_RM_AUDIT_USE_GIVEN_EVENT 0x0001
|
|
|
|
struct _AUTHZ_RM_AUDIT_INFO
|
|
{
|
|
DWORD dwFlags;
|
|
|
|
PCWSTR szResourceManagerName;
|
|
PSID psidRmProcess;
|
|
DWORD dwRmProcessSidSize;
|
|
|
|
HANDLE hEventSource;
|
|
HANDLE hAuditEvent;
|
|
HANDLE hAuditEventPropSubset;
|
|
|
|
PVOID pReserved;
|
|
};
|
|
typedef struct _AUTHZ_RM_AUDIT_INFO AUTHZ_RM_AUDIT_INFO,
|
|
*PAUTHZ_RM_AUDIT_INFO;
|
|
|
|
#define AUTHZ_CLIENT_AUDIT_USE_OWN_EVENT 0x0001
|
|
#define AUTHZ_CLIENT_AUDIT_USE_GIVEN_EVENT 0x0002
|
|
|
|
struct _AUTHZ_CLIENT_AUDIT_INFO
|
|
{
|
|
DWORD dwFlags;
|
|
HANDLE hAuditEvent;
|
|
HANDLE hAuditEventPropSubset;
|
|
|
|
PSID psidClient;
|
|
DWORD dwClientSidSize;
|
|
|
|
DWORD dwProcessId;
|
|
PVOID pReserved;
|
|
};
|
|
typedef struct _AUTHZ_CLIENT_AUDIT_INFO AUTHZ_CLIENT_AUDIT_INFO,
|
|
*PAUTHZ_CLIENT_AUDIT_INFO;
|
|
|
|
#define AUTHZ_AUDIT_USE_GIVEN_EVENT 0x0001
|
|
|
|
struct _AUTHZ_AUDIT_INFO
|
|
{
|
|
DWORD dwFlags;
|
|
HANDLE hAuditEvent;
|
|
HANDLE hAuditEventPropSubset;
|
|
|
|
PCWSTR szOperationType;
|
|
PCWSTR szObjectType;
|
|
PCWSTR szObjectName;
|
|
|
|
PVOID pReserved;
|
|
};
|
|
typedef struct _AUTHZ_AUDIT_INFO AUTHZ_AUDIT_INFO,
|
|
*PAUTHZ_AUDIT_INFO;
|
|
|
|
// struct AzAuditInfoInternalTag
|
|
// {
|
|
// PCWSTR szResourceManagerName;
|
|
// DWORD dwFlags;
|
|
// PVOID pReserved;
|
|
|
|
// HANDLE hEventSource;
|
|
// HANDLE hAuditEvent;
|
|
// HANDLE hAuditEventPropSubset;
|
|
// };
|
|
// typedef struct AzAuditInfoInternalTag AzAuditInfoInternal;
|
|
|
|
DWORD AzpInitRmAuditInfo(
|
|
IN PAUTHZ_RM_AUDIT_INFO pRmAuditInfo
|
|
);
|
|
|
|
|
|
DWORD AzpInitClientAuditInfo(
|
|
IN PAUTHZ_RM_AUDIT_INFO pRmAuditInfo,
|
|
IN PAUTHZ_CLIENT_AUDIT_INFO pClientAuditInfo
|
|
);
|
|
|
|
DWORD
|
|
AzpGenerateAuditEvent(
|
|
IN PAUTHZ_RM_AUDIT_INFO pRmAuditInfo,
|
|
IN PAUTHZ_CLIENT_AUDIT_INFO pClientAuditInfo,
|
|
IN PAUTHZI_CLIENT_CONTEXT pClientContext,
|
|
IN PAUTHZ_AUDIT_INFO pAuditInfo,
|
|
IN DWORD dwAccessMask
|
|
);
|
|
|