Rooba
/
boinc
mirror of https://github.com/BOINC/boinc.git
1
0
Fork 0
Code Issues 1 Packages Projects Releases Wiki Activity

- MGR/SCR: run_program should explicitly set the desktop 

and window station to whichever desktop and window station
        the app launching it belongs. If access is denied then
        change the ACLs on the current desktop and window station
        then attempt to relaunch the application.
        
    lib/
        util.C

svn path=/trunk/boinc/; revision=14812
This commit is contained in:
Rom Walton 2008-02-28 05:01:52 +00:00
parent c8384113e4
commit 756293008b
2 changed files with 63 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
checkin_notes
View File

@ -1711,3 +1711,13 @@ David Feb 27 2008
David Feb 27 2008
- changes to many files to fix gcc4.3 compile
Rom Feb 27 2008
- MGR/SCR: run_program should explicitly set the desktop
and window station to whichever desktop and window station
the app launching it belongs. If access is denied then
change the ACLs on the current desktop and window station
then attempt to relaunch the application.
lib/
util.C

57
lib/util.C
View File

@ -384,10 +384,38 @@ int run_program(
get_sandbox_account_token();
if (sandbox_account_token != NULL) {
// Forces system to create a new desktop and windowstation to host
// the application.
char szWindowStation[256];
char szDesktop[256];
char szDesktopName[512];
memset(szWindowStation, 0, sizeof(szWindowStation));
memset(szDesktop, 0, sizeof(szDesktop));
memset(szDesktopName, 0, sizeof(szDesktopName));
// Retrieve the current window station and desktop names
GetUserObjectInformation(
GetProcessWindowStation(),
UOI_NAME,
szWindowStation,
sizeof(szWindowStation),
NULL
);
GetUserObjectInformation(
GetThreadDesktop(GetCurrentThreadId()),
UOI_NAME,
szDesktop,
sizeof(szDesktop),
NULL
);
// Construct the destination desktop name
strncat(szDesktopName, szWindowStation, sizeof(szDesktopName) - strlen(szDesktopName));
strncat(szDesktopName, "\\", sizeof(szDesktopName) - strlen(szDesktopName));
strncat(szDesktopName, szDesktop, sizeof(szDesktopName) - strlen(szDesktopName));
// Tell CreateProcessAsUser which desktop to use explicitly. If the ACLs haven't
// been configured to allow the sandbox account to run an access denied.
//
startup_info.lpDesktop = "";
startup_info.lpDesktop = szDesktopName;
retval = CreateProcessAsUser(
sandbox_account_token,
@ -401,7 +429,28 @@ int run_program(
dir,
&startup_info,
&process_info
);
);
if (!retval && GetLastError() == ERROR_ACCESS_DENIED) {
if (!AddAceToWindowStation(GetProcessWindowStation(), sandbox_account_sid)) {
fprintf(stderr, "Failed to add ACE to current WindowStation\n");
}
if (!AddAceToDesktop(GetThreadDesktop(GetCurrentThreadId()), sandbox_account_sid)) {
fprintf(stderr, "Failed to add ACE to current Desktop\n");
}
retval = CreateProcessAsUser(
sandbox_account_token,
file,
cmdline,
NULL,
NULL,
FALSE,
0,
NULL,
dir,
&startup_info,
&process_info
);
}
} else {
retval = CreateProcess(
file,