mirror of
https://github.com/golang/sys.git
synced 2026-02-08 03:36:03 +03:00
1d35b9e2eb
This brings the algorithm more exactly in line with what .NET does for the identically named function. Specifically, instead of using OpenProcess, which requires rights that restricted services might not have, we use NtQuerySystemInformation(SYSTEM_PROCESS_INFORMATION) to find the parent process image name and session ID. Fixes golang/go#44921. Change-Id: Ie2ad7521cf4c530037d086e61dbc2413e4e7777c Reviewed-on: https://go-review.googlesource.com/c/sys/+/372554 Trust: Jason Donenfeld <Jason@zx2c4.com> Run-TryBot: Jason Donenfeld <Jason@zx2c4.com> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Patrik Nyblom <pnyb@google.com> Trust: Patrik Nyblom <pnyb@google.com> Run-TryBot: Patrik Nyblom <pnyb@google.com>
102 lines
3.2 KiB
Go
102 lines
3.2 KiB
Go
// Copyright 2012 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
//go:build windows
|
|
// +build windows
|
|
|
|
package svc
|
|
|
|
import (
|
|
"strings"
|
|
"unsafe"
|
|
|
|
"golang.org/x/sys/windows"
|
|
)
|
|
|
|
func allocSid(subAuth0 uint32) (*windows.SID, error) {
|
|
var sid *windows.SID
|
|
err := windows.AllocateAndInitializeSid(&windows.SECURITY_NT_AUTHORITY,
|
|
1, subAuth0, 0, 0, 0, 0, 0, 0, 0, &sid)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return sid, nil
|
|
}
|
|
|
|
// IsAnInteractiveSession determines if calling process is running interactively.
|
|
// It queries the process token for membership in the Interactive group.
|
|
// http://stackoverflow.com/questions/2668851/how-do-i-detect-that-my-application-is-running-as-service-or-in-an-interactive-s
|
|
//
|
|
// Deprecated: Use IsWindowsService instead.
|
|
func IsAnInteractiveSession() (bool, error) {
|
|
interSid, err := allocSid(windows.SECURITY_INTERACTIVE_RID)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
defer windows.FreeSid(interSid)
|
|
|
|
serviceSid, err := allocSid(windows.SECURITY_SERVICE_RID)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
defer windows.FreeSid(serviceSid)
|
|
|
|
t, err := windows.OpenCurrentProcessToken()
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
defer t.Close()
|
|
|
|
gs, err := t.GetTokenGroups()
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
|
|
for _, g := range gs.AllGroups() {
|
|
if windows.EqualSid(g.Sid, interSid) {
|
|
return true, nil
|
|
}
|
|
if windows.EqualSid(g.Sid, serviceSid) {
|
|
return false, nil
|
|
}
|
|
}
|
|
return false, nil
|
|
}
|
|
|
|
// IsWindowsService reports whether the process is currently executing
|
|
// as a Windows service.
|
|
func IsWindowsService() (bool, error) {
|
|
// The below technique looks a bit hairy, but it's actually
|
|
// exactly what the .NET framework does for the similarly named function:
|
|
// https://github.com/dotnet/extensions/blob/f4066026ca06984b07e90e61a6390ac38152ba93/src/Hosting/WindowsServices/src/WindowsServiceHelpers.cs#L26-L31
|
|
// Specifically, it looks up whether the parent process has session ID zero
|
|
// and is called "services".
|
|
|
|
var currentProcess windows.PROCESS_BASIC_INFORMATION
|
|
infoSize := uint32(unsafe.Sizeof(currentProcess))
|
|
err := windows.NtQueryInformationProcess(windows.CurrentProcess(), windows.ProcessBasicInformation, unsafe.Pointer(¤tProcess), infoSize, &infoSize)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
var parentProcess *windows.SYSTEM_PROCESS_INFORMATION
|
|
for infoSize = uint32((unsafe.Sizeof(*parentProcess) + unsafe.Sizeof(uintptr(0))) * 1024); ; {
|
|
parentProcess = (*windows.SYSTEM_PROCESS_INFORMATION)(unsafe.Pointer(&make([]byte, infoSize)[0]))
|
|
err = windows.NtQuerySystemInformation(windows.SystemProcessInformation, unsafe.Pointer(parentProcess), infoSize, &infoSize)
|
|
if err == nil {
|
|
break
|
|
} else if err != windows.STATUS_INFO_LENGTH_MISMATCH {
|
|
return false, err
|
|
}
|
|
}
|
|
for ; ; parentProcess = (*windows.SYSTEM_PROCESS_INFORMATION)(unsafe.Pointer(uintptr(unsafe.Pointer(parentProcess)) + uintptr(parentProcess.NextEntryOffset))) {
|
|
if parentProcess.UniqueProcessID == currentProcess.InheritedFromUniqueProcessId {
|
|
return parentProcess.SessionID == 0 && strings.EqualFold("services.exe", parentProcess.ImageName.String()), nil
|
|
}
|
|
if parentProcess.NextEntryOffset == 0 {
|
|
break
|
|
}
|
|
}
|
|
return false, nil
|
|
}
|