File: //opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/__pycache__/win_runas.cpython-310.pyc
o
�N�g9- � @ s d Z ddlZddlZddlZddlZddlmZ zddlZdZW n e y+ dZY nw z,ddl
Z
ddl Z ddl Z ddl
Z
ddlZddlZddlZddlZddlZddlZdZW n e yc dZY nw e�e�Zdd� Zdd � Zdd d �Zdd
d�Z ddd�Z dS )z.
Run processes as a different user in Windows
� N)�CommandExecutionErrorTFc C s t rtsdS dS )z4
Only load if Win32 Libraries are installed
)Fz(This utility requires pywin32 and psutilZ win_runas)� HAS_WIN32�
HAS_PSUTIL� r r �H/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/win_runas.py� __virtual__, s r c C s< d}| }d| v r| � d�\}}d| v r| � d�\}}||fS )zH
Splits out the username from the domain name and returns both.
�.�@�\)�split)�username�domainZ user_namer r r �split_username6 s r � c
C s| t � � }d}d} zt�| d�}W n tjy$ } zW Y d}~nd}~ww n
t � � | |kr/nq |dur6|S |dur<|�dS )z�
CreateEnvironmentBlock might fail when we close a login session and then
try to re-open one very quickly. Run the method multiple times to work
around the async nature of logoffs.
NTF)�time� win32profileZCreateEnvironmentBlock�
pywintypes�error)�
user_token�inherit�timeout�start�env�excr r r �
create_envC s& ��� �r c %
C sB t |t�s t|�}zt�d|�\}}}t|�\}}W n tjy4 } z
t�|j ��
d�}t |��d}~ww tj tj
B }t�t�� |�} tjj�| � ztjjjtjjjddgd�}
W n tyo t�d� d}
t�| � Y nw |
s~t�d� t| |||�S |dkr�t�||d t j t j �} n|r�t�|||t j t j �} ntjj� |�j!} t�"| tj#�} | d
kr�t�"| tj$�} tjj�| � tjj�%| � t�&� }
d
|
_'t(�)|
d�\}}tjj�*|�}t(�)|
d�\}}tjj�*|�}t(�)|
d�\}}tjj�*|�}t+j,t+j-B t+j.B }t j/}|t j0O }tjjj1||j2|j2|j2d �}t3| d �}d
| v �r'd| � d�} d}z�tjjj4t5| �d
d| ||||d�}|j6}|j7}|j8}|j9} tjjj:�|j2� tjjj:�|j2� tjjj:�|j2� d|i} t;�<|��=� t>�?|t>j@�t jAk�r�t+�B|�} | | d< tC�D|j2tEjFtEjGB �} tE�H| d��} | �I� }!|!�J� | d< W d � n 1 �s�w Y tC�D|j2tEjFtEjGB �}"tE�H|"d��}#|#�I� }$|$| d< W d � n 1 �s�w Y W |du�r�tjjj:�|� t�| � t�| � |
�r�t�K� t�|
� | S |du�r
tjjj:�|� t�| � t�| � |
�rt�K� t�|
� w )aB
Run a command as another user. If the process is running as an admin or
system account this method does not require a password. Other non
privileged accounts need to provide a password for the user to runas.
Commands are run in with the highest level privileges possible for the
account provided.
N�
r ZSeTcbPrivilege)Z
session_idZprivsz!Unable to impersonate SYSTEM userz0No impersonation token, using unprivileged runasz NT AUTHORITY� r �ZdwFlagsZ hStdInputZ
hStdOutputZ hStdErrorF�&&�cmd /c "�")�
logonflagsZapplicationname� commandline�currentdirectory�
creationflags� startupinfoZ environment�pid�retcode�r�stdout�stderr)L�
isinstance�str�
win32security�LookupAccountNamer r r �win32api�
FormatMessage�winerror�rstripr Z TOKEN_QUERYZTOKEN_ADJUST_PRIVILEGESZOpenProcessTokenZGetCurrentProcess�salt�platform�winZ
elevate_tokenZimpersonate_sidZ
SYSTEM_SID�OSError�log�debug� CloseHandle� runas_unprivZ LogonUser�win32conZLOGON32_LOGON_SERVICEZLOGON32_PROVIDER_DEFAULTZLOGON32_LOGON_INTERACTIVEZlogon_msv1_s4u�TokenZGetTokenInformationZTokenElevationTypeZTokenLinkedTokenZgrant_winsta_and_desktopZSECURITY_ATTRIBUTESZbInheritHandle� win32pipe�
CreatePipeZmake_inheritable� win32processZCREATE_NO_WINDOWZCREATE_NEW_CONSOLEZCREATE_SUSPENDED�STARTF_USESTDHANDLES�STARTF_USESHOWWINDOW� STARTUPINFO�handler ZCreateProcessWithTokenW�int�hProcess�hThread� dwProcessId�
dwThreadId�kernel32�psutilZProcessZresume�
win32event�WaitForSingleObject�INFINITE�
WAIT_OBJECT_0�GetExitCodeProcess�msvcrt�open_osfhandle�os�O_RDONLY�O_TEXT�fdopen�read�stripZ RevertToSelf)%ZcmdLiner �password�cwd�_r
r �message�access�thZimpersonation_tokenr Zelevation_typeZsecurity_attributesZ
stdin_readZ stdin_writeZ stdout_readZ stdout_writeZ stderr_readZ stderr_writer$ �flags� startup_infor rE � process_inforF rG rH �ret�exitcode�fd_out�f_outr) �fd_err�f_errr* r r r �runas[ s
��
�
�
�� �����
�
� �
�
��
�
rg c
C s� t |t�s t|�}zt�d|�\}}}t|�\}}W n tjy4 } z
t�|j ��
d�}t |��d}~ww t j
jjddd�\}} t j
jjddd�\}
} t j
jj�t j
jj�} t j
jj| dd�}
tj}|tjO }t j
jj||
| | d�}d| v r|d | � d
�} z4t j
jj|||t j
jj| ||d �}t j
jj�|j� W t j
jj�|
� t j
jj�| � t j
jj�| � nt j
jj�|
� t j
jj�| � t j
jj�| � w d |j i}t � |t j t j!B �}t �"|d
��}|�#� |d< W d � n1 s�w Y t � |
t j t j!B �}t �"|d
��}|�#� |d< W d � n 1 �sw Y t j
jj�$|j%t&j'�tj(k�rDt j
jj)�*� }t j
jj�+|j%t,�-|�� |j.|d< t j
jj�|j%� |S )z3
Runas that works for non-privileged users
Nr FT)Z inherit_readZ
inherit_write)Z srchandler r r r r )r r
rX r! r" r% r# r& r( r) r* r' )/r+ r, r- r. r r r r/ r0 r1 r2 r r3 r4 r5 r> rI Z GetStdHandleZSTD_INPUT_HANDLEZDuplicateHandler; r@ rA rB ZCreateProcessWithLogonWZLOGON_WITH_PROFILEr9 rF rG rP rQ rR rS rT rU rV rL rE rK rM rN ZwintypesZDWORDrO �ctypes�byref�value)�cmdr rX rY rZ r
r r[ �c2pread�c2pwrite�errread�errwrite�stdinZdupinr^ r_ r` ra rc rd re rf rb r r r r: s�
��
�
�
�
� � �
� �
��
�
r: )r )NN)N) �__doc__rh �loggingrR r Zsalt.exceptionsr rJ r � ImportErrorrP r r/ r; rK r= r? r r- Zsalt.platform.winr3 r � getLogger�__name__r7 r r r rg r: r r r r �<module> sD � �
2