Add security access and audit interfaces

xtoskrnl/includes/se.hh

@@ -11,6 +11,8 @@
 
 #include <xtos.hh>
 
+#include <se/access.hh>
+#include <se/audit.hh>
 #include <se/descript.hh>
 #include <se/privileg.hh>
 

xtoskrnl/includes/se/access.hh

@@ -0,0 +1,28 @@
+/**
+ * PROJECT:         ExectOS
+ * COPYRIGHT:       See COPYING.md in the top level directory
+ * FILE:            xtoskrnl/includes/se/access.hh
+ * DESCRIPTION:     Security access state check routines
+ * DEVELOPERS:      Aiken Harris <harraiken91@gmail.com>
+ */
+
+#ifndef __XTOSKRNL_SE_ACCESS_HH
+#define __XTOSKRNL_SE_ACCESS_HH
+
+#include <xtos.hh>
+
+
+/* Kernel Security */
+namespace SE
+{
+    class Access
+    {
+        public:
+            STATIC XTFASTCALL ACCESS_MASK ComputeDeniedAccesses(IN ACCESS_MASK GrantedAccess,
+                                                                IN ACCESS_MASK DesiredAccess);
+            STATIC XTFASTCALL ACCESS_MASK ComputeGrantedAccesses(IN ACCESS_MASK GrantedAccess,
+                                                                 IN ACCESS_MASK DesiredAccess);
+    };
+}
+
+#endif /* __XTOSKRNL_SE_ACCESS_HH */

xtoskrnl/includes/se/audit.hh

@@ -0,0 +1,29 @@
+/**
+ * PROJECT:         ExectOS
+ * COPYRIGHT:       See COPYING.md in the top level directory
+ * FILE:            xtoskrnl/includes/se/audit.hh
+ * DESCRIPTION:     Security Auditing
+ * DEVELOPERS:      Aiken Harris <harraiken91@gmail.com>
+ */
+
+#ifndef __XTOSKRNL_SE_AUDIT_HH
+#define __XTOSKRNL_SE_AUDIT_HH
+
+#include <xtos.hh>
+
+
+/* Kernel Security */
+namespace SE
+{
+    class Audit
+    {
+        public:
+            STATIC XTAPI VOID OperationAuditAlarm(IN PUNICODE_STRING SubsystemName,
+                                                  IN PVOID HandleId,
+                                                  IN PUNICODE_STRING ObjectTypeName,
+                                                  IN ACCESS_MASK AccessMask,
+                                                  IN PSID UserSid);
+    };
+}
+
+#endif /* __XTOSKRNL_SE_AUDIT_HH */

xtoskrnl/includes/se/descript.hh

@@ -28,7 +28,7 @@ namespace SE
                                                               OUT PULONG QuotaSize);
             STATIC XTAPI VOID ReleaseSecurityDescriptor(IN PSECURITY_DESCRIPTOR Descriptor,
                                                         IN KPROCESSOR_MODE ProcessorMode,
-                                                        IN BOOLEAN ForceRelease);
+                                                        IN BOOLEAN Force);
     };
 }