1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
|
/**************************************************************************
**
** Copyright (C) 2017 The Qt Company Ltd.
** Contact: https://www.qt.io/licensing/
**
** This file is part of the Qt Installer Framework.
**
** $QT_BEGIN_LICENSE:GPL-EXCEPT$
** Commercial License Usage
** Licensees holding valid commercial Qt licenses may use this file in
** accordance with the commercial license agreement provided with the
** Software or, alternatively, in accordance with the terms contained in
** a written agreement between you and The Qt Company. For licensing terms
** and conditions see https://www.qt.io/terms-conditions. For further
** information use the contact form at https://www.qt.io/contact-us.
**
** GNU General Public License Usage
** Alternatively, this file may be used under the terms of the GNU
** General Public License version 3 as published by the Free Software
** Foundation with exceptions as appearing in the file LICENSE.GPL3-EXCEPT
** included in the packaging of this file. Please review the following
** information to ensure the GNU General Public License requirements will
** be met: https://www.gnu.org/licenses/gpl-3.0.html.
**
** $QT_END_LICENSE$
**
**************************************************************************/
#include "adminauthorization.h"
#include "utils.h"
#include <QDebug>
#include <QDir>
#include <QSettings>
#include <qt_windows.h>
#include "globals.h"
#ifdef Q_CC_MINGW
# ifndef SEE_MASK_NOASYNC
# define SEE_MASK_NOASYNC 0x00000100
# endif
#endif
namespace QInstaller {
struct DeCoInitializer
{
DeCoInitializer()
: neededCoInit(CoInitialize(NULL) == S_OK)
{
}
~DeCoInitializer()
{
if (neededCoInit)
CoUninitialize();
}
bool neededCoInit;
};
bool AdminAuthorization::hasAdminRights()
{
SID_IDENTIFIER_AUTHORITY authority = { SECURITY_NT_AUTHORITY };
PSID adminGroup;
// Initialize SID.
if (!AllocateAndInitializeSid(&authority,
2,
SECURITY_BUILTIN_DOMAIN_RID,
DOMAIN_ALIAS_RID_ADMINS,
0, 0, 0, 0, 0, 0,
&adminGroup))
return false;
BOOL isInAdminGroup = FALSE;
if (!CheckTokenMembership(0, adminGroup, &isInAdminGroup))
isInAdminGroup = FALSE;
FreeSid(adminGroup);
return isInAdminGroup;
}
bool AdminAuthorization::execute(QWidget *, const QString &program, const QStringList &arguments)
{
DeCoInitializer _;
// AdminAuthorization::execute uses UAC to ask for admin privileges. If the user is no
// administrator yet and the computer's policies are set to not use UAC (which is the case
// in some corporate networks), the call to execute() will simply succeed and not at all
// launch the child process. To avoid this, we detect this situation here and return early.
if (!hasAdminRights()) {
QLatin1String key("HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\"
"Policies\\System");
QSettings registry(key, QSettings::NativeFormat);
const QVariant enableLUA = registry.value(QLatin1String("EnableLUA"));
if ((enableLUA.type() == QVariant::Int) && (enableLUA.toInt() == 0))
return false;
}
const QString file = QDir::toNativeSeparators(program);
const QString args = QInstaller::createCommandline(QString(), arguments);
SHELLEXECUTEINFOW shellExecuteInfo = { 0 };
shellExecuteInfo.nShow = SW_HIDE;
shellExecuteInfo.lpVerb = L"runas";
shellExecuteInfo.lpFile = (wchar_t *)file.utf16();
shellExecuteInfo.cbSize = sizeof(SHELLEXECUTEINFOW);
shellExecuteInfo.lpParameters = (wchar_t *)args.utf16();
shellExecuteInfo.fMask = SEE_MASK_NOASYNC;
qCDebug(QInstaller::lcServer) << "Starting elevated process" << file
<< "with arguments" << args;
if (ShellExecuteExW(&shellExecuteInfo)) {
qCDebug(QInstaller::lcServer) << "Finished starting elevated process.";
return true;
} else {
qCWarning(QInstaller::lcServer) << "Error while starting elevated process" << program
<< ":" << QInstaller::windowsErrorString(GetLastError());
}
return false;
}
} // namespace QInstaller
|
