mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-08-17 01:36:08 +03:00
![](/avatar/831eee306f3a2822c33a278ddf439507?size=48 "Felipe \\\\"Zimmerle\\\\" Costa"){kind=small}
6adf25667d
To organize the folder the Installer application was renamed to installer helper. It is not the real installer, it is just an helper which is executed during the installation phase.
1995 lines
61 KiB
C++
1995 lines
61 KiB
C++
// Installer.cpp : Defines the entry point for the console application.
|
|
//
|
|
|
|
#include "stdafx.h"
|
|
#include <ahadmin.h>
|
|
#include <string>
|
|
#include "XUnzip.h"
|
|
|
|
// Logging level definition.
|
|
#define EVENT_ERROR 100
|
|
#define EVENT_CRITICAL 75
|
|
#define EVENT_IMPORTANT 50
|
|
#define EVENT_NORMAL 25
|
|
#define EVENT_LEVEL_MASK 0xFFFF
|
|
|
|
#define EVENT_APPLOG (1 << 17)
|
|
#define EVENT_SYSLOG (1 << 18)
|
|
#define EVENT_STDOUT (1 << 19)
|
|
#define EVENT_STDERR (1 << 20)
|
|
|
|
// This class uese IIS7.0 native API to operate on
|
|
// %windir%\system32\inetsrv\config\applicationHost.config
|
|
class Iis7Config
|
|
{
|
|
public:
|
|
Iis7Config() {}
|
|
virtual ~Iis7Config() {}
|
|
|
|
// Defines the IIS running mode.
|
|
enum AppMode {
|
|
MODE_X64, // IIS runs under x86_64 mode.
|
|
MODE_X86, // IIS runs under i386 mode.
|
|
MODE_UNKNOWN, // IIS run under an unknow mode.
|
|
MODE_FAIL // Failed to retrieve app mode.
|
|
};
|
|
|
|
static void Log(int event_meta, const char *event_pattern, ...) {
|
|
const int kErrorLen = 2048;
|
|
char event_message[kErrorLen];
|
|
va_list argptr;
|
|
|
|
// If current event is less than log_level_, return directly.
|
|
int event_level = event_meta & EVENT_LEVEL_MASK;
|
|
//if (event_level < log_level_) return;
|
|
|
|
// Combile log type with default log type.
|
|
int event_type = event_meta;// | log_type_;
|
|
|
|
va_start(argptr, event_pattern);
|
|
vsnprintf(event_message, kErrorLen, event_pattern, argptr);
|
|
va_end(argptr);
|
|
|
|
// #ifdef WIN32
|
|
// Only write error and critical event to windows event log
|
|
// if ((event_type & EVENT_SYSLOG) != 0 && event_level >= EVENT_CRITICAL) {
|
|
WORD windows_event_type;
|
|
if (event_level == EVENT_ERROR) {
|
|
windows_event_type = EVENTLOG_ERROR_TYPE;
|
|
} else { // if (event_level == EVENT_CRITICAL)
|
|
windows_event_type= EVENTLOG_INFORMATION_TYPE;
|
|
}
|
|
|
|
LPCSTR event_message_pointer = event_message;
|
|
|
|
// Get a handle to the event log.
|
|
HANDLE h = RegisterEventSource(NULL, L"ModSecurityIIS Installer");
|
|
if (h != NULL) {
|
|
// Report the event.
|
|
ReportEventA(h, // event log handle
|
|
windows_event_type, // event type
|
|
0, // event category
|
|
1, // event identifier
|
|
NULL, // no user security identifier
|
|
1, // number of strings
|
|
0, // no data
|
|
&event_message_pointer, // pointer to strings
|
|
NULL); // no data
|
|
DeregisterEventSource(h);
|
|
}
|
|
// }
|
|
// #endif // WIN32
|
|
|
|
// Output log to file
|
|
/* if ((event_type & EVENT_APPLOG) != 0) {
|
|
if (CreateLogFile()) {
|
|
FILE* file = fopen(log_file_name_.c_str(), "a+");
|
|
if (file != NULL) {
|
|
fputs(FormatW3CTime(time(NULL)).c_str(), file);
|
|
fputs(": ", file);
|
|
fputs(event_message, file);
|
|
fputs("\n", file);
|
|
fclose(file);
|
|
} else if ((event_type & EVENT_STDERR) != 0) {
|
|
fprintf(stderr, "%s: Failed to open log file (%d).\n",
|
|
FormatW3CTime(time(NULL)).c_str(), errno);
|
|
}
|
|
} else if ((event_type & EVENT_STDERR) != 0) {
|
|
fprintf(stderr, "%s: Failed to create log file (%d)\n",
|
|
FormatW3CTime(time(NULL)).c_str(), errno);
|
|
}
|
|
}
|
|
|
|
// Output to std err.
|
|
if ((event_type & EVENT_STDERR) != 0) {
|
|
fprintf(stderr, "%s: %s\n",
|
|
FormatW3CTime(time(NULL)).c_str(), event_message);
|
|
}*/
|
|
}
|
|
|
|
static void Log(int event_meta, const wchar_t *event_pattern, ...) {
|
|
const int kErrorLen = 2048;
|
|
wchar_t event_message[kErrorLen];
|
|
va_list argptr;
|
|
|
|
// If current event is less than log_level_, return directly.
|
|
int event_level = event_meta & EVENT_LEVEL_MASK;
|
|
//if (event_level < log_level_) return;
|
|
|
|
// Combile log type with default log type.
|
|
int event_type = event_meta;// | log_type_;
|
|
|
|
va_start(argptr, event_pattern);
|
|
_vsnwprintf(event_message, kErrorLen, event_pattern, argptr);
|
|
va_end(argptr);
|
|
|
|
// #ifdef WIN32
|
|
// Only write error and critical event to windows event log
|
|
// if ((event_type & EVENT_SYSLOG) != 0 && event_level >= EVENT_CRITICAL) {
|
|
WORD windows_event_type;
|
|
if (event_level == EVENT_ERROR) {
|
|
windows_event_type = EVENTLOG_ERROR_TYPE;
|
|
} else { // if (event_level == EVENT_CRITICAL)
|
|
windows_event_type= EVENTLOG_INFORMATION_TYPE;
|
|
}
|
|
|
|
LPCWSTR event_message_pointer = event_message;
|
|
|
|
// Get a handle to the event log.
|
|
HANDLE h = RegisterEventSource(NULL, L"ModSecurityIIS Installer");
|
|
if (h != NULL) {
|
|
// Report the event.
|
|
ReportEventW(h, // event log handle
|
|
windows_event_type, // event type
|
|
0, // event category
|
|
1, // event identifier
|
|
NULL, // no user security identifier
|
|
1, // number of strings
|
|
0, // no data
|
|
&event_message_pointer, // pointer to strings
|
|
NULL); // no data
|
|
DeregisterEventSource(h);
|
|
}
|
|
// }
|
|
// #endif // WIN32
|
|
|
|
// Output log to file
|
|
/* if ((event_type & EVENT_APPLOG) != 0) {
|
|
if (CreateLogFile()) {
|
|
FILE* file = fopen(log_file_name_.c_str(), "a+");
|
|
if (file != NULL) {
|
|
fputs(FormatW3CTime(time(NULL)).c_str(), file);
|
|
fputs(": ", file);
|
|
fputs(event_message, file);
|
|
fputs("\n", file);
|
|
fclose(file);
|
|
} else if ((event_type & EVENT_STDERR) != 0) {
|
|
fprintf(stderr, "%s: Failed to open log file (%d).\n",
|
|
FormatW3CTime(time(NULL)).c_str(), errno);
|
|
}
|
|
} else if ((event_type & EVENT_STDERR) != 0) {
|
|
fprintf(stderr, "%s: Failed to create log file (%d)\n",
|
|
FormatW3CTime(time(NULL)).c_str(), errno);
|
|
}
|
|
}
|
|
|
|
// Output to std err.
|
|
if ((event_type & EVENT_STDERR) != 0) {
|
|
fprintf(stderr, "%s: %s\n",
|
|
FormatW3CTime(time(NULL)).c_str(), event_message);
|
|
}*/
|
|
}
|
|
|
|
// Install/uninstall filters in IIS.
|
|
// Actually, add/remove entry to/from <system.webServer/globalModules>
|
|
// adn <system.webServer/modules> sections.
|
|
static bool InstallFilter(const wchar_t* dll_file);
|
|
static bool UninstallFilter();
|
|
|
|
// Install/uninstall a site for Admin Console.
|
|
// Permissions for CGI exe are set/unset accordingly.
|
|
/* static bool InstallAdminConsole(const char* site_root, const char* cgi_path);
|
|
static bool UninstallAdminConsole(const char* site_root,
|
|
const char* cgi_path);
|
|
*/
|
|
// Determine whether version 7 mode supported.
|
|
static bool IsSupported();
|
|
|
|
// Load configuration from IIS
|
|
// Actually, load from <system.applicationHost/sites> section.
|
|
virtual bool Load();
|
|
|
|
// Get IIS 7 running mode.
|
|
static AppMode GetAppMode();
|
|
|
|
private:
|
|
// Module name
|
|
static BSTR kModuleName;
|
|
static BSTR kConfigName;
|
|
|
|
// Admin Console site name, "Google Sitemap Generator Admin Console".
|
|
//static BSTR kSiteName;
|
|
|
|
static bool Iis7Config::AddToConfigSections(IAppHostWritableAdminManager* manager,
|
|
BSTR config);
|
|
|
|
// Add an entry to <system.webServer/globalModules> section, like:
|
|
// <add name="ModSecurityIIS" image="path\ModSecurityIIS.dll" />
|
|
static bool AddToGlobalModules(IAppHostWritableAdminManager* manager,
|
|
BSTR image);
|
|
|
|
// Add an entry to <system.webServer/modules> section, like:
|
|
// <add name="ModSecurityIIS" />
|
|
static bool AddToModules(IAppHostWritableAdminManager* manager);
|
|
|
|
// All CGI exe to be executed.
|
|
// "cgi_path" is the executable file path.
|
|
//static bool SetCGIRestriction(IAppHostWritableAdminManager* manager,
|
|
// BSTR cgi_path);
|
|
|
|
// Create Admin Console site.
|
|
// "site_root" is the site root directory.
|
|
//static bool CreateAdminConsoleSite(IAppHostWritableAdminManager *manager,
|
|
// BSTR site_root);
|
|
|
|
// Remove customization for Admin Console site.
|
|
// This customzation is added in CustomizeAdminConsole method.
|
|
//static bool RemoveAdminConsoleCustomization(IAppHostWritableAdminManager* manager);
|
|
|
|
// Add customization for Admin Console site.
|
|
// Actually, it adds a <location> tag for the Admin Console site.
|
|
//static bool CustomizeAdminConsole(IAppHostWritableAdminManager* manager,
|
|
// BSTR cgi_path);
|
|
|
|
// Set property value.
|
|
static bool SetProperty(IAppHostElement* element, BSTR name, BSTR value);
|
|
|
|
// Get property value.
|
|
static bool GetProperty(IAppHostElement* element, BSTR name, VARIANT* value);
|
|
|
|
// Get the index from given collection, whose key=value.
|
|
// *index == -1 indicates nothing found.
|
|
static bool GetFromCollection(IAppHostElementCollection* collection,
|
|
BSTR property_key, BSTR property_value,
|
|
short* index);
|
|
|
|
// Get the element from given colletion.
|
|
// The element should contains a propery, whose key/value is given by arg.
|
|
// "*element = NULL" indicates nothing can be found.
|
|
static bool GetFromCollection(IAppHostElementCollection* collection,
|
|
BSTR property_key, BSTR property_value,
|
|
IAppHostElement** element);
|
|
|
|
// Get child's index from given collection, whose key = value.
|
|
// *index == -1 indicates no such child.
|
|
static bool GetFromChildren(IAppHostChildElementCollection* children,
|
|
BSTR child_name, short* index);
|
|
|
|
// Get child element form given child collection.
|
|
// The child element should contains a property, whose key/value is given by
|
|
// arg. *element = NULL indicates no such child.
|
|
static bool GetFromChildren(IAppHostChildElementCollection* children,
|
|
BSTR child_name, IAppHostElement** element);
|
|
|
|
// Remove an entry from given section.
|
|
static bool RemoveFromCollection(IAppHostWritableAdminManager* manager,
|
|
BSTR section, BSTR property_name, BSTR property_value);
|
|
|
|
// Load site configuration from an element.
|
|
//bool LoadSite(IAppHostElement* site_element);
|
|
|
|
static int Iis7Config::GetNativeSystemInfo(SYSTEM_INFO* system_info);
|
|
};
|
|
|
|
BSTR Iis7Config::kModuleName = L"ModSecurityIIS";
|
|
BSTR Iis7Config::kConfigName = L"ModSecurity";
|
|
//BSTR Iis7Config::kSiteName = L"ModSecurityIIS Admin Console";
|
|
|
|
#define CHECK_HRESULT(expression, msg) \
|
|
{ \
|
|
HRESULT _hr = (expression); \
|
|
if (FAILED(_hr)) { \
|
|
Log(EVENT_ERROR, msg " (0x%0x)", _hr); \
|
|
break; \
|
|
} \
|
|
}
|
|
#define CHECK_BOOL(expression, msg) \
|
|
if (!expression) { \
|
|
Log(EVENT_ERROR, msg); \
|
|
break; \
|
|
}
|
|
|
|
bool Iis7Config::Load() {
|
|
IAppHostAdminManager* admin_manager = NULL;
|
|
IAppHostElement* parent = NULL;
|
|
IAppHostElementCollection* collection = NULL;
|
|
IAppHostElement* element = NULL;
|
|
|
|
//BSTR section_name = SysAllocString(L"system.applicationHost/sites");
|
|
BSTR bstr_config_path = SysAllocString(L"MACHINE/WEBROOT/APPHOST");
|
|
|
|
HRESULT hresult = S_OK;
|
|
bool result = false;
|
|
do {
|
|
// Initialize com
|
|
hresult = CoInitializeEx(NULL, COINIT_MULTITHREADED);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to intialize COM.");
|
|
break;
|
|
}
|
|
|
|
// Create an admin manager
|
|
hresult = CoCreateInstance(__uuidof(AppHostAdminManager), NULL,
|
|
CLSCTX_INPROC_SERVER,
|
|
__uuidof(IAppHostAdminManager),
|
|
reinterpret_cast<LPVOID*>(&admin_manager));
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to create AppHostAdminManager.");
|
|
break;
|
|
}
|
|
/*
|
|
// Get <sites> section
|
|
hresult = admin_manager->GetAdminSection(section_name, bstr_config_path, &parent);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to access sites configuration.");
|
|
break;
|
|
} else if (&parent == NULL) {
|
|
Log(EVENT_ERROR, "Unable to get sites configuration.");
|
|
break;
|
|
}
|
|
|
|
// Get all the child elements of <sites>
|
|
hresult = parent->get_Collection(&collection);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to access <sites> child collection.");
|
|
break;
|
|
} else if (&collection == NULL) {
|
|
Log(EVENT_ERROR, "Unable to get <sites> child collection.");
|
|
break;
|
|
}
|
|
|
|
// Iterate all the children of <sites>
|
|
DWORD element_count = 0;
|
|
hresult = collection->get_Count(&element_count);
|
|
for(USHORT i = 0; i < element_count; ++i) {
|
|
VARIANT item_index;
|
|
item_index.vt = VT_I2;
|
|
item_index.iVal = i;
|
|
|
|
// Get the child element
|
|
hresult = collection->get_Item(item_index, &element);
|
|
if (FAILED(hresult) || &element == NULL) {
|
|
Log(EVENT_ERROR, "Failed to iterate child (%d) of sites.", i);
|
|
continue;
|
|
}
|
|
|
|
if (!LoadSite(element)) {
|
|
Log(EVENT_ERROR, "Failed to load site from site (%d).", i);
|
|
continue;
|
|
}
|
|
|
|
element->Release();
|
|
element = NULL;
|
|
}
|
|
*/
|
|
result = true;
|
|
} while (false);
|
|
|
|
// Exiting / Unwinding
|
|
if (element != NULL) element->Release();
|
|
if (collection != NULL) collection->Release();
|
|
if (parent != NULL) parent->Release();
|
|
if (admin_manager != NULL) admin_manager->Release();
|
|
|
|
//SysFreeString(section_name);
|
|
SysFreeString(bstr_config_path);
|
|
CoUninitialize();
|
|
|
|
return result;
|
|
}
|
|
|
|
bool Iis7Config::InstallFilter(const wchar_t* dll_file) {
|
|
IAppHostWritableAdminManager* admin_manager = NULL;
|
|
BSTR bstr_config_path = SysAllocString(L"MACHINE/WEBROOT/APPHOST");
|
|
|
|
// Build the full path of ModSecurity module DLL.
|
|
BSTR module_wpath = SysAllocString(dll_file);
|
|
BSTR config = SysAllocString(kConfigName);
|
|
|
|
HRESULT hresult = S_OK;
|
|
bool result = false;
|
|
do {
|
|
// Initialize com
|
|
hresult = CoInitializeEx(NULL, COINIT_MULTITHREADED);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to intialize COM.");
|
|
break;
|
|
}
|
|
|
|
// Create a writable admin manager
|
|
hresult = CoCreateInstance(__uuidof(AppHostWritableAdminManager), NULL,
|
|
CLSCTX_INPROC_SERVER,
|
|
__uuidof(IAppHostWritableAdminManager),
|
|
reinterpret_cast<LPVOID*>(&admin_manager));
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to create AppHostWritableAdminManager.");
|
|
break;
|
|
}
|
|
|
|
// set commit path
|
|
hresult = admin_manager->put_CommitPath(L"MACHINE/WEBROOT/APPHOST");
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to put commit path.");
|
|
break;
|
|
}
|
|
|
|
// Add ModSecurity entry to <system.webServer/globalModules> section
|
|
if (!AddToGlobalModules(admin_manager, module_wpath)) {
|
|
Log(EVENT_ERROR, "Failed to add entry to globalModules.");
|
|
break;
|
|
}
|
|
|
|
// Add ModSecurity entry to <system.webServer/modules> section
|
|
if (!AddToModules(admin_manager)) {
|
|
Log(EVENT_ERROR, "Failed to add entry to modules.");
|
|
break;
|
|
}
|
|
|
|
if(!AddToConfigSections(admin_manager, config)) {
|
|
Log(EVENT_ERROR, "Failed to add entry to config sections.");
|
|
break;
|
|
}
|
|
|
|
// Save changes.
|
|
hresult = admin_manager->CommitChanges();
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to save changes to install module.");
|
|
break;
|
|
}
|
|
|
|
result = true;
|
|
} while (false);
|
|
|
|
// Exiting / Unwinding
|
|
if (admin_manager != NULL) admin_manager->Release();
|
|
|
|
SysFreeString(module_wpath);
|
|
SysFreeString(bstr_config_path);
|
|
SysFreeString(config);
|
|
|
|
CoUninitialize();
|
|
|
|
return result;
|
|
}
|
|
|
|
bool Iis7Config::UninstallFilter() {
|
|
IAppHostWritableAdminManager* admin_manager = NULL;
|
|
BSTR bstr_config_path = SysAllocString(L"MACHINE/WEBROOT/APPHOST");
|
|
|
|
HRESULT hresult = S_OK;
|
|
bool result = false;
|
|
do {
|
|
// Initialize com
|
|
hresult = CoInitializeEx(NULL, COINIT_MULTITHREADED);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to intialize COM.");
|
|
break;
|
|
}
|
|
|
|
// Create a writable admin manager
|
|
hresult = CoCreateInstance(__uuidof(AppHostWritableAdminManager), NULL,
|
|
CLSCTX_INPROC_SERVER,
|
|
__uuidof(IAppHostWritableAdminManager),
|
|
reinterpret_cast<LPVOID*>(&admin_manager));
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to create AppHostWritableAdminManager.");
|
|
break;
|
|
}
|
|
|
|
// set commit path
|
|
hresult = admin_manager->put_CommitPath(bstr_config_path);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to put commit path.");
|
|
break;
|
|
}
|
|
|
|
// Remove ModSecurity entry from <system.webServer/globalModules> section.
|
|
if (!RemoveFromCollection(admin_manager, L"system.webServer/globalModules", L"name", kModuleName)) {
|
|
Log(EVENT_ERROR, "Failed to remove entry from globalModules.");
|
|
break;
|
|
}
|
|
|
|
// Remove ModSecurity entry from <system.webServer/modules> section.
|
|
if (!RemoveFromCollection(admin_manager, L"system.webServer/modules", L"name", kModuleName)) {
|
|
Log(EVENT_ERROR, "Failed to remove entry from modules.");
|
|
break;
|
|
}
|
|
|
|
// Save changes.
|
|
hresult = admin_manager->CommitChanges();
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to save changes to install module.");
|
|
break;
|
|
}
|
|
|
|
result = true;
|
|
} while (false);
|
|
|
|
// Exiting / Unwinding
|
|
if (admin_manager != NULL) admin_manager->Release();
|
|
SysFreeString(bstr_config_path);
|
|
|
|
CoUninitialize();
|
|
|
|
return result;
|
|
}
|
|
|
|
// Add section to <configSections/sectionGroup "system.webServer">, like:
|
|
// <section name="ModSecurity" overrideModeDefault="Allow" allowDefinition="Everywhere" />
|
|
bool Iis7Config::AddToConfigSections(IAppHostWritableAdminManager* manager,
|
|
BSTR config) {
|
|
HRESULT hr;
|
|
bool result = false;
|
|
IAppHostConfigManager * pCfgMgr = NULL;
|
|
IAppHostConfigFile * pCfgFile = NULL;
|
|
IAppHostSectionGroup * pRtSctnGrp = NULL;
|
|
IAppHostSectionGroup * pSctnGrp = NULL;
|
|
IAppHostSectionDefinitionCollection * pSctnDefCol = NULL;
|
|
IAppHostSectionDefinition * pSctnDef = NULL;
|
|
|
|
BSTR bstrConfigCommitPath = SysAllocString(L"MACHINE/WEBROOT/APPHOST");
|
|
BSTR bstrSctnGrpName = SysAllocString(L"system.webServer");
|
|
BSTR bstrDeny = SysAllocString(L"Allow");
|
|
BSTR bstrAppHostOnly = SysAllocString(L"Everywhere");
|
|
|
|
// Get an IAppHostConfigManager
|
|
hr = manager -> get_ConfigManager ( &pCfgMgr );
|
|
if ( FAILED( hr ) || ( &pCfgMgr == NULL ) )
|
|
{
|
|
Log(EVENT_ERROR, "ERROR: Unable to get a config manager.\n" );
|
|
goto exit;
|
|
}
|
|
|
|
// Get an IAppHostConfigFile
|
|
hr = pCfgMgr -> GetConfigFile ( bstrConfigCommitPath, &pCfgFile );
|
|
if ( FAILED ( hr ) || ( &pCfgFile == NULL ) )
|
|
{
|
|
if ( E_ACCESSDENIED == hr )
|
|
{
|
|
Log(EVENT_ERROR, "ERROR: Access to configuration denied.\n" );
|
|
Log(EVENT_ERROR, " Run sample as an administrator.\n" );
|
|
}
|
|
else
|
|
{
|
|
Log(EVENT_ERROR, "ERROR: Unable to get config file.\n" );
|
|
}
|
|
goto exit;
|
|
}
|
|
|
|
// Get the root section group
|
|
hr = pCfgFile -> get_RootSectionGroup ( &pRtSctnGrp );
|
|
if ( FAILED ( hr ) || ( &pRtSctnGrp == NULL ) )
|
|
{
|
|
Log(EVENT_ERROR, "ERROR: Unable to access root section group\n" );
|
|
goto exit;
|
|
}
|
|
|
|
ULONG i, cnt;
|
|
|
|
hr = pRtSctnGrp ->get_Count(&cnt);
|
|
if ( FAILED ( hr ))
|
|
{
|
|
Log(EVENT_ERROR, "ERROR: Unable to enumerate root section group\n" );
|
|
goto exit;
|
|
}
|
|
|
|
for(i = 0; i < cnt; i++)
|
|
{
|
|
VARIANT v;
|
|
BSTR name;
|
|
|
|
v.vt = VT_I4;
|
|
v.intVal = i;
|
|
|
|
hr = pRtSctnGrp->get_Item(v, &pSctnGrp);
|
|
if ( FAILED ( hr ) || ( &pSctnGrp == NULL ) )
|
|
{
|
|
Log(EVENT_ERROR, "ERROR: Unable to access root section item\n" );
|
|
goto exit;
|
|
}
|
|
|
|
hr = pSctnGrp->get_Name(&name);
|
|
if ( FAILED ( hr ))
|
|
{
|
|
Log(EVENT_ERROR, "ERROR: Unable to get root section name\n" );
|
|
goto exit;
|
|
}
|
|
|
|
if(wcscmp(name, L"system.webServer") == 0)
|
|
break;
|
|
|
|
pSctnGrp->Release();
|
|
}
|
|
|
|
if(i == cnt)
|
|
{
|
|
Log(EVENT_ERROR, "ERROR: Unable to find system.webServer section group\n");
|
|
goto exit;
|
|
}
|
|
|
|
// Get the section collection
|
|
hr = pSctnGrp -> get_Sections ( &pSctnDefCol );
|
|
if ( FAILED ( hr ) || ( &pSctnDefCol == NULL ) )
|
|
{
|
|
Log(EVENT_ERROR, "ERROR: Unable to access section collection\n" );
|
|
goto exit;
|
|
}
|
|
|
|
hr = pSctnDefCol->get_Count(&cnt);
|
|
if ( FAILED ( hr ))
|
|
{
|
|
Log(EVENT_ERROR, "ERROR: Unable to enumerate section collection\n" );
|
|
goto exit;
|
|
}
|
|
|
|
for(i = 0; i < cnt; i++)
|
|
{
|
|
VARIANT v;
|
|
BSTR name;
|
|
|
|
v.vt = VT_I4;
|
|
v.intVal = i;
|
|
|
|
hr = pSctnDefCol->get_Item(v, &pSctnDef);
|
|
if ( FAILED ( hr ) || ( &pSctnDef == NULL ) )
|
|
{
|
|
Log(EVENT_ERROR, "ERROR: Unable to access section item\n" );
|
|
goto exit;
|
|
}
|
|
|
|
hr = pSctnDef->get_Name(&name);
|
|
if ( FAILED ( hr ))
|
|
{
|
|
Log(EVENT_ERROR, "ERROR: Unable to get section name\n" );
|
|
goto exit;
|
|
}
|
|
|
|
if(wcscmp(name, config) == 0)
|
|
break;
|
|
|
|
pSctnDef->Release();
|
|
}
|
|
|
|
if(i == cnt)
|
|
{
|
|
// Add the new section
|
|
hr = pSctnDefCol -> AddSection ( config, &pSctnDef );
|
|
if ( FAILED ( hr ) || ( &pSctnDef == NULL ) )
|
|
{
|
|
Log(EVENT_ERROR, "ERROR: Unable to add new section\n" );
|
|
goto exit;
|
|
}
|
|
}
|
|
|
|
// Set the section attributes
|
|
pSctnDef -> put_OverrideModeDefault ( bstrDeny );
|
|
pSctnDef -> put_AllowDefinition ( bstrAppHostOnly );
|
|
|
|
result = true;
|
|
exit:
|
|
// Exiting / Unwinding
|
|
if ( pRtSctnGrp != NULL )
|
|
{
|
|
pRtSctnGrp->Release();
|
|
pRtSctnGrp = NULL;
|
|
}
|
|
if ( pSctnGrp != NULL )
|
|
{
|
|
pSctnGrp->Release();
|
|
pSctnGrp = NULL;
|
|
}
|
|
if ( pSctnDefCol != NULL )
|
|
{
|
|
pSctnDefCol->Release();
|
|
pSctnDefCol = NULL;
|
|
}
|
|
if ( pSctnDef != NULL )
|
|
{
|
|
pSctnDef->Release();
|
|
pSctnDef = NULL;
|
|
}
|
|
if ( pCfgFile != NULL )
|
|
{
|
|
pCfgFile->Release();
|
|
pCfgFile = NULL;
|
|
}
|
|
if ( pCfgMgr != NULL )
|
|
{
|
|
pCfgMgr->Release();
|
|
pCfgMgr = NULL;
|
|
}
|
|
|
|
SysFreeString( bstrConfigCommitPath );
|
|
SysFreeString( bstrSctnGrpName );
|
|
SysFreeString( bstrDeny );
|
|
SysFreeString( bstrAppHostOnly );
|
|
|
|
return result;
|
|
}
|
|
|
|
// Add an entry to <system.webServer/globalModules> section, like:
|
|
// <add name="ModSecurityIIS" image="${image}" />
|
|
bool Iis7Config::AddToGlobalModules(IAppHostWritableAdminManager* manager,
|
|
BSTR image) {
|
|
IAppHostElement* parent = NULL;
|
|
IAppHostElementCollection* collection = NULL;
|
|
IAppHostElement* element = NULL;
|
|
|
|
BSTR bstr_section_name = SysAllocString(L"system.webServer/globalModules");
|
|
BSTR bstr_config_path = SysAllocString(L"MACHINE/WEBROOT/APPHOST");
|
|
BSTR bstr_element_name = SysAllocString(L"add");
|
|
|
|
HRESULT hresult = S_OK;
|
|
bool result = false;
|
|
do {
|
|
// Get <system.webServer/globalModules> section
|
|
hresult = manager->GetAdminSection(bstr_section_name,
|
|
bstr_config_path, &parent);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to access globalModules configuration.");
|
|
break;
|
|
} else if (&parent == NULL) {
|
|
Log(EVENT_ERROR, "Unable to get globalModules configuration.");
|
|
break;
|
|
}
|
|
|
|
// Get collection of <system.webServer/globalModules>
|
|
hresult = parent->get_Collection(&collection);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to access globalModules child collection.");
|
|
break;
|
|
} else if (&collection == NULL) {
|
|
Log(EVENT_ERROR, "Unable to get globalModules child collection.");
|
|
break;
|
|
}
|
|
|
|
// create a global modules child element, like:
|
|
// <add name="ModSecurityIIS", image="ModSecurityIIS.dll" />
|
|
|
|
// First to detect old modules.
|
|
if (!GetFromCollection(collection, L"name", kModuleName, &element)) {
|
|
Log(EVENT_ERROR, "Failed to try detect old modules.");
|
|
break;
|
|
}
|
|
|
|
// No old ModSecurity module, create/add one.
|
|
if (element == NULL) {
|
|
hresult = collection->CreateNewElement(bstr_element_name, &element);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to create globalModules/add element.");
|
|
break;
|
|
}
|
|
|
|
if (!SetProperty(element, L"name", kModuleName)) {
|
|
Log(EVENT_ERROR, "Failed to set name property.");
|
|
break;
|
|
}
|
|
// Add the new element to collection
|
|
hresult = collection->AddElement(element);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to add globalModule/add element.");
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (!SetProperty(element, L"image", image)) {
|
|
Log(EVENT_ERROR, "Failed to set image property.");
|
|
break;
|
|
}
|
|
|
|
result = true;
|
|
} while (false);
|
|
|
|
// Exiting / Unwinding
|
|
if (element != NULL) element->Release();
|
|
if (collection != NULL) collection->Release();
|
|
if (parent != NULL) parent->Release();
|
|
|
|
SysFreeString(bstr_section_name);
|
|
SysFreeString(bstr_config_path);
|
|
SysFreeString(bstr_element_name);
|
|
|
|
return result;
|
|
}
|
|
|
|
|
|
// Add an entry to <system.webServer/modules> section, like:
|
|
// <add name="ModSecurityIIS" />
|
|
bool Iis7Config::AddToModules(IAppHostWritableAdminManager* manager) {
|
|
IAppHostElement* parent = NULL;
|
|
IAppHostElementCollection* collection = NULL;
|
|
IAppHostElement* element = NULL;
|
|
|
|
BSTR bstr_section_name = SysAllocString(L"system.webServer/modules");
|
|
BSTR bstr_config_path = SysAllocString(L"MACHINE/WEBROOT/APPHOST");
|
|
BSTR bstr_element_name = SysAllocString(L"add");
|
|
|
|
HRESULT hresult = S_OK;
|
|
bool result = false;
|
|
do {
|
|
// Get <system.webServer/modules> section
|
|
hresult = manager->GetAdminSection(bstr_section_name,
|
|
bstr_config_path, &parent);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to access modules configuration.");
|
|
break;
|
|
} else if (&parent == NULL) {
|
|
Log(EVENT_ERROR, "Unable to get modules configuration.");
|
|
break;
|
|
}
|
|
|
|
// Get collection of <system.webServer/modules>
|
|
hresult = parent->get_Collection(&collection);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to access modules child collection.");
|
|
break;
|
|
} else if (&collection == NULL) {
|
|
Log(EVENT_ERROR, "Unable to get modules child collection.");
|
|
break;
|
|
}
|
|
|
|
// Try to detect old ModSecurity module.
|
|
if (!GetFromCollection(collection, L"name", kModuleName, &element)) {
|
|
Log(EVENT_ERROR, "Failed to try detect old modules.");
|
|
break;
|
|
}
|
|
|
|
// No old ModSecurity module exists.
|
|
if (element == NULL) {
|
|
hresult = collection->CreateNewElement(bstr_element_name, &element);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to create modules/add element.");
|
|
break;
|
|
}
|
|
|
|
if (!SetProperty(element, L"name", kModuleName)) {
|
|
Log(EVENT_ERROR, "Failed to set name property.");
|
|
break;
|
|
}
|
|
|
|
// Add the new element to collection
|
|
hresult = collection->AddElement(element);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to add modules/add element.");
|
|
break;
|
|
}
|
|
}
|
|
|
|
result = true;
|
|
} while (false);
|
|
|
|
// Exiting / Unwinding
|
|
if (element != NULL) element->Release();
|
|
if (collection != NULL) collection->Release();
|
|
if (parent != NULL) parent->Release();
|
|
|
|
SysFreeString(bstr_section_name);
|
|
SysFreeString(bstr_config_path);
|
|
SysFreeString(bstr_element_name);
|
|
|
|
return result;
|
|
}
|
|
|
|
bool Iis7Config::RemoveFromCollection(IAppHostWritableAdminManager* manager,
|
|
BSTR section, BSTR property_name, BSTR property_value) {
|
|
IAppHostElement* parent = NULL;
|
|
IAppHostElementCollection* collection = NULL;
|
|
IAppHostElement* element = NULL;
|
|
IAppHostProperty* name_property = NULL;
|
|
|
|
BSTR bstr_section_name = SysAllocString(section);
|
|
BSTR bstr_config_path = SysAllocString(L"MACHINE/WEBROOT/APPHOST");
|
|
|
|
HRESULT hresult = S_OK;
|
|
bool result = false;
|
|
do {
|
|
// Get section contains ModSecurityModule entry
|
|
hresult = manager->GetAdminSection(bstr_section_name,
|
|
bstr_config_path, &parent);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to access section to remove module.");
|
|
break;
|
|
} else if (&parent == NULL) {
|
|
Log(EVENT_ERROR, "Unable to get section to remove module.");
|
|
break;
|
|
}
|
|
|
|
// Get child collection of the section
|
|
hresult = parent->get_Collection(&collection);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to access collection to remove module.");
|
|
break;
|
|
} else if (&collection == NULL) {
|
|
Log(EVENT_ERROR, "Unable to get collection to remove module.");
|
|
break;
|
|
}
|
|
|
|
// Get number of children.
|
|
DWORD count;
|
|
hresult = collection->get_Count(&count);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to get the count of collection.");
|
|
break;
|
|
}
|
|
|
|
short sitemap_index;
|
|
if (!GetFromCollection(collection, property_name, property_value, &sitemap_index)) {
|
|
Log(EVENT_ERROR, "Failed to find ModSecurity module.");
|
|
break;
|
|
}
|
|
|
|
if (sitemap_index != -1) {
|
|
VARIANT var_index;
|
|
var_index.vt = VT_I2;
|
|
var_index.iVal = sitemap_index;
|
|
|
|
hresult = collection->DeleteElement(var_index);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to remove ModSecurity module.");
|
|
}
|
|
} else {
|
|
Log(EVENT_IMPORTANT, "No ModSecurity module is found.");
|
|
}
|
|
|
|
result = SUCCEEDED(hresult);
|
|
} while (false);
|
|
|
|
// Exiting / Unwinding
|
|
if (name_property != NULL) name_property->Release();
|
|
if (element != NULL) element->Release();
|
|
if (collection != NULL) collection->Release();
|
|
if (parent != NULL) parent->Release();
|
|
|
|
SysFreeString(bstr_section_name);
|
|
SysFreeString(bstr_config_path);
|
|
|
|
return result;
|
|
}
|
|
/*
|
|
bool Iis7Config::LoadSite(IAppHostElement* element) {
|
|
std::string name, id, phys_path, log_path;
|
|
|
|
// Get name.
|
|
VARIANT name_var;
|
|
if (!GetProperty(element, L"name", &name_var)) {
|
|
Log(EVENT_ERROR, "Failed to get name property value.");
|
|
return false;
|
|
} else if (name_var.vt != VT_BSTR) {
|
|
Log(EVENT_ERROR, "site name should be VT_BSTR");
|
|
return false;
|
|
} else {
|
|
name = static_cast<const char*>(bstr_t(name_var.bstrVal));
|
|
}
|
|
|
|
// Get id.
|
|
VARIANT id_var;
|
|
if (!GetProperty(element, L"id", &id_var)) {
|
|
Log(EVENT_ERROR, "Failed to get id value.");
|
|
return false;
|
|
} else if (id_var.vt == VT_I4) {
|
|
char buffer[16];
|
|
itoa(id_var.intVal, buffer, 10);
|
|
id = buffer;
|
|
} else if (id_var.vt == VT_UI4) {
|
|
char buffer[16];
|
|
itoa(id_var.uintVal, buffer, 10);
|
|
id = buffer;
|
|
} else if (id_var.vt == VT_BSTR) {
|
|
id = static_cast<const char*>(bstr_t(id_var.bstrVal));
|
|
} else {
|
|
Log(EVENT_ERROR, "site id should be VT_BSTR or VT_I4");
|
|
}
|
|
|
|
// Get logfile directory.
|
|
IAppHostElement* logfile_element = NULL;
|
|
HRESULT hresult = element->GetElementByName(L"logfile", &logfile_element);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to get logfile element.");
|
|
} else {
|
|
VARIANT dir_var;
|
|
if (!GetProperty(logfile_element, L"directory", &dir_var)) {
|
|
Log(EVENT_ERROR, "Failed to get directory value.");
|
|
} else if (dir_var.vt == VT_BSTR) {
|
|
log_path = static_cast<const char*>(bstr_t(dir_var.bstrVal));
|
|
log_path.append("\\W3SVC").append(id);
|
|
} else {
|
|
Log(EVENT_ERROR, "directory should be VT_BSTR");
|
|
}
|
|
}
|
|
|
|
// Get pysical path.
|
|
IAppHostElementCollection* application_collection = NULL;
|
|
IAppHostElementCollection* virtualdir_collection = NULL;
|
|
IAppHostElement* application_element = NULL;
|
|
IAppHostElement* virtualdir_element = NULL;
|
|
|
|
hresult = S_OK;
|
|
bool result = false;
|
|
do {
|
|
// Get <application> collection in <site> element
|
|
hresult = element->get_Collection(&application_collection);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to get application collection.");
|
|
break;
|
|
}
|
|
|
|
// Find <application> element wiht path="/"
|
|
short root_app = -1;
|
|
if (!GetFromCollection(application_collection, L"path", L"/", &root_app)) {
|
|
Log(EVENT_ERROR, "Failed to get root application index.");
|
|
break;
|
|
} else if (root_app == -1) {
|
|
Log(EVENT_ERROR, "No root application defined.");
|
|
break;
|
|
}
|
|
|
|
// Get the root <application> element
|
|
VARIANT var_rootapp;
|
|
var_rootapp.vt = VT_I2;
|
|
var_rootapp.iVal = root_app;
|
|
hresult = application_collection->get_Item(var_rootapp, &application_element);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to get root application element.");
|
|
break;
|
|
}
|
|
|
|
// Get <virtualDirectory> collection in <application> element.
|
|
hresult = application_element->get_Collection(&virtualdir_collection);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to get virtualdir collection.");
|
|
break;
|
|
}
|
|
|
|
// Find <virtualDirectory> element with path="/"
|
|
short root_dir = -1;
|
|
if (!GetFromCollection(virtualdir_collection, L"path", L"/", &root_dir)) {
|
|
Log(EVENT_ERROR, "Failed to get root virtualDirectory index.");
|
|
break;
|
|
} else if (root_dir == -1) {
|
|
Log(EVENT_ERROR, "No root virtualDirectory defined.");
|
|
break;
|
|
}
|
|
|
|
// Get the root <virtualDirectory> element.
|
|
VARIANT var_rootdir;
|
|
var_rootdir.vt = VT_I2;
|
|
var_rootdir.iVal = root_dir;
|
|
hresult = virtualdir_collection->get_Item(var_rootdir, &virtualdir_element);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to get root virtualDirectory element.");
|
|
break;
|
|
}
|
|
|
|
VARIANT var_path;
|
|
if (!GetProperty(virtualdir_element, L"physicalPath", &var_path)) {
|
|
Log(EVENT_ERROR, "Failed to get physicalPath property.");
|
|
break;
|
|
} else if (var_path.vt != VT_BSTR) {
|
|
Log(EVENT_ERROR, "physicalPath should be instance of VT_BSTR.");
|
|
break;
|
|
}
|
|
|
|
phys_path = static_cast<const char*>(bstr_t(var_path.bstrVal));
|
|
result = true;
|
|
} while (false);
|
|
|
|
if (logfile_element != NULL) logfile_element->Release();
|
|
if (application_collection != NULL) application_collection->Release();
|
|
if (virtualdir_collection != NULL) virtualdir_collection->Release();
|
|
if (application_element != NULL) application_element->Release();
|
|
if (virtualdir_element != NULL) virtualdir_element->Release();
|
|
|
|
// At last we store all the values.
|
|
if (result) {
|
|
site_ids_.push_back(id);
|
|
names_.push_back(name);
|
|
physical_paths_.push_back(phys_path);
|
|
log_paths_.push_back(log_path);
|
|
host_urls_.push_back("");
|
|
}
|
|
|
|
return result;
|
|
}
|
|
*/
|
|
bool Iis7Config::GetFromCollection(IAppHostElementCollection* collection,
|
|
BSTR property_key, BSTR property_value,
|
|
short* index) {
|
|
IAppHostProperty* property = NULL;
|
|
IAppHostElement* element = NULL;
|
|
|
|
HRESULT hresult = S_OK;
|
|
*index = -1;
|
|
do {
|
|
// Get number of children.
|
|
DWORD count;
|
|
hresult = collection->get_Count(&count);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to get the count of collection.");
|
|
break;
|
|
}
|
|
|
|
// Iterate every child to check whether it should be removed.
|
|
for (USHORT i = 0; i < count && SUCCEEDED(hresult); ++i) {
|
|
// Get item at index i.
|
|
VARIANT idx;
|
|
idx.vt = VT_I2;
|
|
idx.iVal = i;
|
|
hresult = collection->get_Item(idx, &element);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to get item (%d).", i);
|
|
break;
|
|
}
|
|
|
|
// Get name property of item i.
|
|
VARIANT var_value;
|
|
if (!GetProperty(element, property_key, &var_value)) {
|
|
Log(EVENT_ERROR, "Failed to get property value.");
|
|
hresult = S_FALSE;
|
|
break;
|
|
}
|
|
|
|
// Check the property value
|
|
if (wcscmp(property_value, var_value.bstrVal) == 0) {
|
|
*index = static_cast<short>(i);
|
|
break;
|
|
}
|
|
|
|
element->Release();
|
|
element = NULL;
|
|
}
|
|
} while (false);
|
|
|
|
if (property != NULL) property->Release();
|
|
if (element != NULL) element->Release();
|
|
|
|
return SUCCEEDED(hresult);
|
|
}
|
|
|
|
bool Iis7Config::GetFromCollection(IAppHostElementCollection* collection,
|
|
BSTR property_key, BSTR property_value,
|
|
IAppHostElement** element) {
|
|
short idx;
|
|
if (!GetFromCollection(collection, property_key, property_value, &idx)) {
|
|
Log(EVENT_ERROR, "Failed to get child from collection.");
|
|
}
|
|
|
|
if (idx != -1) {
|
|
VARIANT idx_var;
|
|
idx_var.vt = VT_I2;
|
|
idx_var.iVal = idx;
|
|
|
|
HRESULT hresult = collection->get_Item(idx_var, element);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to get element from collection.");
|
|
return false;
|
|
} else {
|
|
return true;
|
|
}
|
|
} else {
|
|
*element = NULL;
|
|
return true;
|
|
}
|
|
}
|
|
|
|
|
|
bool Iis7Config::SetProperty(IAppHostElement* element, BSTR name, BSTR value) {
|
|
IAppHostProperty* property = NULL;
|
|
BSTR bstr_name = SysAllocString(name);
|
|
BSTR bstr_value = SysAllocString(value);
|
|
|
|
HRESULT hresult = S_OK;
|
|
do {
|
|
// Get the property by name.
|
|
hresult = element->GetPropertyByName(bstr_name, &property);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to get property.");
|
|
break;
|
|
}
|
|
|
|
// Set the property value.
|
|
VARIANT value_variant;
|
|
value_variant.vt = VT_BSTR;
|
|
value_variant.bstrVal = bstr_value;
|
|
hresult = property->put_Value(value_variant);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to set property value.");
|
|
break;
|
|
}
|
|
} while (false);
|
|
|
|
if (property != NULL) property->Release();
|
|
SysFreeString(bstr_name);
|
|
SysFreeString(bstr_value);
|
|
|
|
return SUCCEEDED(hresult);
|
|
}
|
|
|
|
bool Iis7Config::GetProperty(IAppHostElement* element, BSTR name, VARIANT* value) {
|
|
IAppHostProperty* property = NULL;
|
|
BSTR bstr_name = SysAllocString(name);
|
|
|
|
HRESULT hresult = S_OK;
|
|
do {
|
|
// Get the property by name.
|
|
hresult = element->GetPropertyByName(bstr_name, &property);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to get property.");
|
|
break;
|
|
}
|
|
|
|
// Get the property value.
|
|
hresult = property->get_Value(value);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to get property value.");
|
|
break;
|
|
}
|
|
} while (false);
|
|
|
|
if (property != NULL) property->Release();
|
|
SysFreeString(bstr_name);
|
|
|
|
return SUCCEEDED(hresult);
|
|
}
|
|
|
|
|
|
bool Iis7Config::IsSupported() {
|
|
HRESULT hr = CoInitializeEx(NULL, COINIT_MULTITHREADED);
|
|
if (FAILED(hr)) {
|
|
Log(EVENT_ERROR, "Failed to check IIS 7 compatibility. 0x%0x", hr);
|
|
return false;
|
|
}
|
|
|
|
// Try with IIS 7.0...
|
|
IAppHostAdminManager* admin_manager = NULL;
|
|
hr = CoCreateInstance(__uuidof(AppHostAdminManager), NULL,
|
|
CLSCTX_INPROC_SERVER, __uuidof(IAppHostAdminManager),
|
|
reinterpret_cast<LPVOID*>(&admin_manager));
|
|
if (SUCCEEDED(hr)) {
|
|
admin_manager->Release();
|
|
}
|
|
|
|
CoUninitialize();
|
|
|
|
return SUCCEEDED(hr);
|
|
}
|
|
|
|
int Iis7Config::GetNativeSystemInfo(SYSTEM_INFO* system_info) {
|
|
HMODULE module = GetModuleHandle(L"Kernel32.dll");
|
|
if (module == NULL) {
|
|
Log(EVENT_ERROR, "Failed to GetModuleHandle of Kernel32.dll. (%d)",
|
|
GetLastError());
|
|
return -1;
|
|
}
|
|
|
|
typedef void (WINAPI *Procedure)(LPSYSTEM_INFO);
|
|
Procedure proc = (Procedure) GetProcAddress(module, "GetNativeSystemInfo");
|
|
if (proc == NULL) {
|
|
if (GetLastError() == ERROR_PROC_NOT_FOUND) {
|
|
return 0;
|
|
} else {
|
|
Log(EVENT_ERROR, "Failed to GetProcAddress (%d).", GetLastError());
|
|
return -1;
|
|
}
|
|
return 0;
|
|
} else {
|
|
proc(system_info);
|
|
return 1;
|
|
}
|
|
}
|
|
|
|
Iis7Config::AppMode Iis7Config::GetAppMode() {
|
|
SYSTEM_INFO sys_info;
|
|
if (Iis7Config::GetNativeSystemInfo(&sys_info) != 1) {
|
|
Log(EVENT_ERROR, "Failed to GetNativeSystemInfo for IIS7.");
|
|
return MODE_FAIL;
|
|
}
|
|
|
|
if (sys_info.wProcessorArchitecture == PROCESSOR_ARCHITECTURE_INTEL) {
|
|
return MODE_X86;
|
|
} else if (sys_info.wProcessorArchitecture == PROCESSOR_ARCHITECTURE_AMD64) {
|
|
return MODE_X64;
|
|
} else {
|
|
return MODE_UNKNOWN;
|
|
}
|
|
}
|
|
/*
|
|
bool Iis7Config::InstallAdminConsole(const char* site_root,
|
|
const char* cgi_path) {
|
|
IAppHostWritableAdminManager* admin_manager = NULL;
|
|
bool result = false;
|
|
do {
|
|
// Initialize com
|
|
CHECK_HRESULT(CoInitializeEx(NULL, COINIT_MULTITHREADED), "Failed to intialize COM.");
|
|
|
|
// Create a writable admin manager
|
|
CHECK_HRESULT(CoCreateInstance(__uuidof(AppHostWritableAdminManager), NULL,
|
|
CLSCTX_INPROC_SERVER,
|
|
__uuidof(IAppHostWritableAdminManager),
|
|
reinterpret_cast<LPVOID*>(&admin_manager)),
|
|
"Failed to create AppHostWritableAdminManager.");
|
|
|
|
// set commit path
|
|
CHECK_HRESULT(admin_manager->put_CommitPath(L"MACHINE/WEBROOT/APPHOST"),
|
|
"Failed to put commit path.");
|
|
|
|
|
|
CHECK_BOOL(CreateAdminConsoleSite(admin_manager, bstr_t(site_root)),
|
|
"Failed to create AdminConsole Site.");
|
|
CHECK_BOOL(SetCGIRestriction(admin_manager, bstr_t(cgi_path)),
|
|
"Failed to set CGI restriction.");
|
|
CHECK_BOOL(CustomizeAdminConsole(admin_manager, bstr_t(cgi_path)),
|
|
"Failed to customize admin console.");
|
|
|
|
// Save changes.
|
|
CHECK_HRESULT(admin_manager->CommitChanges(),
|
|
"Failed to save changes to install module.");
|
|
|
|
Log(EVENT_CRITICAL, "Admin Console installed successfully.");
|
|
result = true;
|
|
} while (false);
|
|
|
|
// Exiting / Unwinding
|
|
if (admin_manager != NULL) admin_manager->Release();
|
|
|
|
CoUninitialize();
|
|
|
|
return result;
|
|
}
|
|
|
|
bool Iis7Config::UninstallAdminConsole(const char* site_root,
|
|
const char* cgi_path) {
|
|
IAppHostWritableAdminManager* admin_manager = NULL;
|
|
BSTR bstr_config_path = SysAllocString(L"MACHINE/WEBROOT/APPHOST");
|
|
|
|
bool result = false;
|
|
do {
|
|
// Initialize com
|
|
CHECK_HRESULT(CoInitializeEx(NULL, COINIT_MULTITHREADED), "Failed to intialize COM.");
|
|
|
|
// Create a writable admin manager
|
|
CHECK_HRESULT(CoCreateInstance(__uuidof(AppHostWritableAdminManager), NULL,
|
|
CLSCTX_INPROC_SERVER,
|
|
__uuidof(IAppHostWritableAdminManager),
|
|
reinterpret_cast<LPVOID*>(&admin_manager)),
|
|
"Failed to create AppHostWritableAdminManager.");
|
|
|
|
// set commit path
|
|
CHECK_HRESULT(admin_manager->put_CommitPath(L"MACHINE/WEBROOT/APPHOST"),
|
|
"Failed to put commit path.");
|
|
|
|
CHECK_BOOL(RemoveFromCollection(admin_manager, L"system.applicationHost/sites", L"name", kSiteName), "Failed to remove Admin console site.");
|
|
CHECK_BOOL(RemoveFromCollection(admin_manager, L"system.webServer/security/isapiCgiRestriction", L"path", bstr_t(cgi_path)),
|
|
"Failed to remove CGI restriction.");
|
|
CHECK_BOOL(RemoveAdminConsoleCustomization(admin_manager),
|
|
"Failed to remove customization of admin console.");
|
|
|
|
// Save changes.
|
|
CHECK_HRESULT(admin_manager->CommitChanges(),
|
|
"Failed to save changes to install module.");
|
|
|
|
result = true;
|
|
} while (false);
|
|
|
|
// Exiting / Unwinding
|
|
if (admin_manager != NULL) admin_manager->Release();
|
|
|
|
SysFreeString(bstr_config_path);
|
|
|
|
CoUninitialize();
|
|
|
|
return result;
|
|
}
|
|
|
|
|
|
bool Iis7Config::SetCGIRestriction(IAppHostWritableAdminManager* manager, BSTR cgi_path) {
|
|
IAppHostElement* parent = NULL;
|
|
IAppHostElementCollection* collection = NULL;
|
|
IAppHostElement* element = NULL;
|
|
|
|
BSTR bstr_section_name = SysAllocString(L"system.webServer/security/isapiCgiRestriction");
|
|
BSTR bstr_config_path = SysAllocString(L"MACHINE/WEBROOT/APPHOST");
|
|
BSTR bstr_element_name = SysAllocString(L"add");
|
|
|
|
HRESULT hresult = S_OK;
|
|
bool result = false;
|
|
do {
|
|
// Get <system.webServer/security/isapiCgiRestriction> section
|
|
hresult = manager->GetAdminSection(bstr_section_name,
|
|
bstr_config_path, &parent);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to access isapiCgiRestriction configuration. (0x%0x)", hresult);
|
|
break;
|
|
} else if (&parent == NULL) {
|
|
Log(EVENT_ERROR, "Unable to get isapiCgiRestriction configuration.");
|
|
break;
|
|
}
|
|
|
|
// Get collection of <system.webServer/security/isapiCgiRestriction>
|
|
hresult = parent->get_Collection(&collection);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to access isapiCgiRestriction child collection. (0x%0x)", hresult);
|
|
break;
|
|
} else if (&collection == NULL) {
|
|
Log(EVENT_ERROR, "Unable to get isapiCgiRestriction child collection.");
|
|
break;
|
|
}
|
|
|
|
// create a child element, like:
|
|
// <add path="C:\Program Fils\GSG\AdminConsoleCGI.exe" />
|
|
|
|
// First to detect old cgi restriction.
|
|
if (!GetFromCollection(collection, L"path", cgi_path, &element)) {
|
|
Log(EVENT_ERROR, "Failed to try detect old cgi restriction.");
|
|
break;
|
|
}
|
|
|
|
// No old cgi restriction, create one.
|
|
if (element == NULL) {
|
|
hresult = collection->CreateNewElement(bstr_element_name, &element);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to create isapiCgiRestriction/add element. (0x%0x)", hresult);
|
|
break;
|
|
}
|
|
|
|
if (!SetProperty(element, L"path", cgi_path)) {
|
|
Log(EVENT_ERROR, "Failed to set path property.");
|
|
break;
|
|
}
|
|
|
|
if (!SetProperty(element, L"allowed", L"true")) {
|
|
Log(EVENT_ERROR, "Failed to set allowed property.");
|
|
break;
|
|
}
|
|
|
|
// Add the new element to collection
|
|
hresult = collection->AddElement(element);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to add isapiCgiRestriction/add element. (0x%0x)", hresult);
|
|
break;
|
|
}
|
|
}
|
|
|
|
Log(EVENT_NORMAL, "CGIRestriction set properly.");
|
|
result = true;
|
|
} while (false);
|
|
|
|
// Exiting / Unwinding
|
|
if (element != NULL) element->Release();
|
|
if (collection != NULL) collection->Release();
|
|
if (parent != NULL) parent->Release();
|
|
|
|
SysFreeString(bstr_section_name);
|
|
SysFreeString(bstr_config_path);
|
|
SysFreeString(bstr_element_name);
|
|
|
|
return result;
|
|
}
|
|
|
|
|
|
bool Iis7Config::CreateAdminConsoleSite(IAppHostWritableAdminManager *manager, BSTR site_root) {
|
|
IAppHostElement* parent = NULL;
|
|
IAppHostElementCollection* collection = NULL;
|
|
IAppHostElement* element = NULL;
|
|
|
|
BSTR bstr_section_name = SysAllocString(L"system.applicationHost/sites");
|
|
BSTR bstr_config_path = SysAllocString(L"MACHINE/WEBROOT/APPHOST");
|
|
|
|
HRESULT hresult = S_OK;
|
|
bool result = false;
|
|
do {
|
|
// Get <system.applicationHost/sites> section
|
|
hresult = manager->GetAdminSection(bstr_section_name,
|
|
bstr_config_path, &parent);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to access sites configuration. (0x%0x)", hresult);
|
|
break;
|
|
} else if (&parent == NULL) {
|
|
Log(EVENT_ERROR, "Unable to get sites configuration.");
|
|
break;
|
|
}
|
|
|
|
// Get collection of <system.applicationHost/sites>
|
|
hresult = parent->get_Collection(&collection);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to access sites child collection. (0x%0x)", hresult);
|
|
break;
|
|
} else if (&collection == NULL) {
|
|
Log(EVENT_ERROR, "Unable to get sites child collection.");
|
|
break;
|
|
}
|
|
|
|
// create a <site> element, like:
|
|
|
|
// First to detect old site.
|
|
if (!GetFromCollection(collection, L"name", kSiteName, &element)) {
|
|
Log(EVENT_ERROR, "Failed to try detect old site.");
|
|
break;
|
|
}
|
|
if (element != NULL) {
|
|
Log(EVENT_CRITICAL, "Old Admin Console Site exists. Skip.");
|
|
result = true;
|
|
break;
|
|
}
|
|
|
|
DWORD site_count;
|
|
CHECK_HRESULT(collection->get_Count(&site_count),
|
|
"Failed to get site count.");
|
|
char site_id[64];
|
|
itoa(site_count + 466453, site_id, 10);
|
|
|
|
CHECK_HRESULT(collection->CreateNewElement(L"site", &element),
|
|
"Failed to create site element.");
|
|
CHECK_BOOL(SetProperty(element, L"name", kSiteName),
|
|
"Failed to set site name property.");
|
|
CHECK_BOOL(SetProperty(element, L"id", bstr_t(site_id)),
|
|
"Failed to set site id property.");
|
|
CHECK_HRESULT(collection->AddElement(element),
|
|
"Failed to add site element.");
|
|
|
|
// Create and set <application> element.
|
|
IAppHostElementCollection* app_collection = NULL;
|
|
IAppHostElement* app_element = NULL;
|
|
CHECK_HRESULT(element->get_Collection(&app_collection),
|
|
"Failed to get app collection.");
|
|
CHECK_HRESULT(app_collection->CreateNewElement(L"application", &app_element),
|
|
"Failed to create application element.");
|
|
CHECK_BOOL(SetProperty(app_element, L"path", L"/"),
|
|
"Failed to set app path.");
|
|
// CHECK_BOOL(SetProperty(app_element, L"applicationPool", kSiteName), "Failed to set app applicationPool.");
|
|
CHECK_HRESULT(app_collection->AddElement(app_element),
|
|
"Failed to add application element.");
|
|
|
|
// Create and set <virtualDirectory> element.
|
|
IAppHostElementCollection* dir_collection = NULL;
|
|
IAppHostElement* dir_element = NULL;
|
|
CHECK_HRESULT(app_element->get_Collection(&dir_collection),
|
|
"Failed to get virtualDirectory collection.");
|
|
CHECK_HRESULT(dir_collection->CreateNewElement(L"virtualDirectory", &dir_element),
|
|
"Failed to create virtualDirectory.");
|
|
CHECK_BOOL(SetProperty(dir_element, L"path", L"/"),
|
|
"Failed to set dir path.");
|
|
CHECK_BOOL(SetProperty(dir_element, L"physicalPath", site_root),
|
|
"Failed to set dir physicalPath.");
|
|
CHECK_HRESULT(dir_collection->AddElement(dir_element),
|
|
"Failed to add virtualDirectory.");
|
|
|
|
// Get <bindings> element.
|
|
IAppHostElement* bindings_element = NULL;
|
|
CHECK_HRESULT(element->GetElementByName(L"bindings", &bindings_element),
|
|
"Failed to get bindings element.");
|
|
CHECK_BOOL((bindings_element != NULL),
|
|
"Failed to find bindings element.");
|
|
|
|
// Create and set <binding> element.
|
|
IAppHostElementCollection* binding_collection = NULL;
|
|
IAppHostElement* binding_element = NULL;
|
|
CHECK_HRESULT(bindings_element->get_Collection(&binding_collection),
|
|
"Failed to get binding collection.");
|
|
CHECK_HRESULT(binding_collection->CreateNewElement(L"binding", &binding_element),
|
|
"Failed to create binding.");
|
|
CHECK_BOOL(SetProperty(binding_element, L"protocol", L"http"),
|
|
"Failed to set binding protocol.");
|
|
CHECK_BOOL(SetProperty(binding_element, L"bindingInformation", bstr_t(IisConfig::kAdminConsoleBinding)),
|
|
"Failed to set binding bindingInformation.");
|
|
CHECK_HRESULT(binding_collection->AddElement(binding_element),
|
|
"Failed to add binding element.");
|
|
|
|
Log(EVENT_NORMAL, "Admin Console site created successfully.");
|
|
result = true;
|
|
} while (false);
|
|
|
|
// Exiting / Unwinding
|
|
if (element != NULL) element->Release();
|
|
if (collection != NULL) collection->Release();
|
|
if (parent != NULL) parent->Release();
|
|
|
|
SysFreeString(bstr_section_name);
|
|
SysFreeString(bstr_config_path);
|
|
|
|
return result;
|
|
}
|
|
*/
|
|
bool Iis7Config::GetFromChildren(IAppHostChildElementCollection* children,
|
|
BSTR child_name, short* index) {
|
|
IAppHostElement* element = NULL;
|
|
|
|
HRESULT hresult = S_OK;
|
|
*index = -1;
|
|
do {
|
|
// Get number of children.
|
|
DWORD count;
|
|
hresult = children->get_Count(&count);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to get the count of children.");
|
|
break;
|
|
}
|
|
|
|
// Iterate every child to check whether it should be removed.
|
|
for (USHORT i = 0; i < count && SUCCEEDED(hresult); ++i) {
|
|
// Get item at index i.
|
|
VARIANT idx;
|
|
idx.vt = VT_I2;
|
|
idx.iVal = i;
|
|
hresult = children->get_Item(idx, &element);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Unable to get item [%d]. (0x%0x)", i, hresult);
|
|
break;
|
|
}
|
|
|
|
// Get name property of item i.
|
|
|
|
BSTR name = NULL;
|
|
if (!element->get_Name(&name)) {
|
|
Log(EVENT_ERROR, "Failed to get property value.");
|
|
hresult = S_FALSE;
|
|
break;
|
|
}
|
|
|
|
// Check the property value
|
|
if (wcscmp(child_name, name) == 0) {
|
|
*index = static_cast<short>(i);
|
|
SysFreeString(name);
|
|
break;
|
|
}
|
|
|
|
SysFreeString(name);
|
|
element->Release();
|
|
element = NULL;
|
|
}
|
|
} while (false);
|
|
|
|
|
|
if (element != NULL) element->Release();
|
|
|
|
return SUCCEEDED(hresult);
|
|
}
|
|
|
|
bool Iis7Config::GetFromChildren(IAppHostChildElementCollection* children,
|
|
BSTR child_name, IAppHostElement** element) {
|
|
short idx;
|
|
if (!GetFromChildren(children, child_name, &idx)) {
|
|
Log(EVENT_ERROR, "Failed to get element from children.");
|
|
}
|
|
|
|
if (idx != -1) {
|
|
VARIANT idx_var;
|
|
idx_var.vt = VT_I2;
|
|
idx_var.iVal = idx;
|
|
|
|
HRESULT hresult = children->get_Item(idx_var, element);
|
|
if (FAILED(hresult)) {
|
|
Log(EVENT_ERROR, "Failed to get element from children.");
|
|
return false;
|
|
} else {
|
|
return true;
|
|
}
|
|
} else {
|
|
*element = NULL;
|
|
return true;
|
|
}
|
|
}
|
|
/*
|
|
bool Iis7Config::CustomizeAdminConsole(IAppHostWritableAdminManager* manager, BSTR cgi_path) {
|
|
IAppHostConfigManager* config_manager = NULL;
|
|
IAppHostConfigFile * config_file = NULL;
|
|
IAppHostConfigLocationCollection* location_collection = NULL;
|
|
IAppHostConfigLocation* location = NULL;
|
|
IAppHostElement* handlers = NULL;
|
|
IAppHostElementCollection* handlers_collection = NULL;
|
|
IAppHostElement* remove_element = NULL;
|
|
IAppHostElement* add_element = NULL;
|
|
|
|
bool result = false;
|
|
do {
|
|
CHECK_HRESULT(manager->get_ConfigManager(&config_manager),
|
|
"Failed to get config manager.");
|
|
CHECK_HRESULT(config_manager->GetConfigFile(L"MACHINE/WEBROOT/APPHOST", &config_file),
|
|
"Failed to get config file.");
|
|
CHECK_HRESULT(config_file->get_Locations(&location_collection),
|
|
"Failed to get location collection.");
|
|
|
|
bool success = false;
|
|
do {
|
|
// Get number of children.
|
|
DWORD count;
|
|
CHECK_HRESULT(location_collection->get_Count(&count), "Unable to get the count of collection.");
|
|
|
|
// Iterate every child to check whether it should be removed.
|
|
USHORT i = 0;
|
|
for (; i < count; ++i) {
|
|
// Get item at index i.
|
|
VARIANT idx;
|
|
idx.vt = VT_I2;
|
|
idx.iVal = i;
|
|
CHECK_HRESULT(location_collection->get_Item(idx, &location), "Unable to get item.");
|
|
|
|
BSTR location_path;
|
|
CHECK_HRESULT(location->get_Path(&location_path), "Failed to get location path.");
|
|
if (wcscmp(location_path, kSiteName) == 0) {
|
|
success = true;
|
|
break;
|
|
}
|
|
|
|
SysFreeString(location_path);
|
|
location->Release();
|
|
location = NULL;
|
|
}
|
|
|
|
if (i == count) success = true;
|
|
} while (false);
|
|
|
|
if (!success) {
|
|
break;
|
|
}
|
|
|
|
if (location != NULL) {
|
|
Log(EVENT_CRITICAL, "Location already exists. Skip.");
|
|
result = true;
|
|
break;
|
|
}
|
|
|
|
CHECK_HRESULT(location_collection->AddLocation(kSiteName, &location),
|
|
"Failed to add location.");
|
|
CHECK_HRESULT(location->AddConfigSection(L"system.webServer/handlers", &handlers),
|
|
"Failed to add config section.");
|
|
CHECK_HRESULT(SetProperty(handlers, L"accessPolicy", L"Read, Execute, Script"),
|
|
"Failed to set accessPolicy.");
|
|
|
|
CHECK_HRESULT(handlers->get_Collection(&handlers_collection),
|
|
"Failed to get handlers collection.");
|
|
CHECK_HRESULT(handlers_collection->CreateNewElement(L"remove", &remove_element),
|
|
"Failed to create remove element.");
|
|
CHECK_BOOL(SetProperty(remove_element, L"name", L"CGI-exe"),
|
|
"Failed to set name of remove element.");
|
|
CHECK_HRESULT(handlers_collection->AddElement(remove_element),
|
|
"Failed to add remove element.");
|
|
|
|
CHECK_HRESULT(handlers_collection->CreateNewElement(L"add", &add_element),
|
|
"Failed to create add element.");
|
|
CHECK_BOOL(SetProperty(add_element, L"name", L"CGI-exe"),
|
|
"Failed to set name of add element.");
|
|
CHECK_BOOL(SetProperty(add_element, L"path", L"*.cgi"),
|
|
"Failed to set path of add element.");
|
|
CHECK_BOOL(SetProperty(add_element, L"verb", L"*"),
|
|
"Failed to set verb of element.");
|
|
CHECK_BOOL(SetProperty(add_element, L"modules", L"CgiModule"),
|
|
"Failed to set modules of add element.");
|
|
CHECK_BOOL(SetProperty(add_element, L"scriptProcessor", cgi_path),
|
|
"Failed to set scriptProcessor of add element.");
|
|
CHECK_BOOL(SetProperty(add_element, L"resourceType", L"File"),
|
|
"Failed to set resourceType of add element.");
|
|
CHECK_BOOL(SetProperty(add_element, L"requireAccess", L"Execute"),
|
|
"Failed to set requireAccess of add element.");
|
|
CHECK_BOOL(SetProperty(add_element, L"allowPathInfo", L"true"),
|
|
"Failed to set naallowPathInfome of add element.");
|
|
CHECK_HRESULT(handlers_collection->AddElement(add_element),
|
|
"Failed to add add element.");
|
|
|
|
Log(EVENT_NORMAL, "Admin Console site customized successfully.");
|
|
result = true;
|
|
} while (false);
|
|
|
|
return result;
|
|
}
|
|
|
|
|
|
bool Iis7Config::RemoveAdminConsoleCustomization(IAppHostWritableAdminManager* manager) {
|
|
IAppHostConfigManager* config_manager = NULL;
|
|
IAppHostConfigFile * config_file = NULL;
|
|
IAppHostConfigLocationCollection* location_collection = NULL;
|
|
IAppHostConfigLocation* location = NULL;
|
|
|
|
bool result = false;
|
|
do {
|
|
CHECK_HRESULT(manager->get_ConfigManager(&config_manager), "Failed to get config manager.");
|
|
CHECK_HRESULT(config_manager->GetConfigFile(L"MACHINE/WEBROOT/APPHOST", &config_file), "Failed to get config file.");
|
|
CHECK_HRESULT(config_file->get_Locations(&location_collection), "Failed to get location collection.");
|
|
|
|
bool success = false;
|
|
VARIANT idx;
|
|
do {
|
|
// Get number of children.
|
|
DWORD count;
|
|
CHECK_HRESULT(location_collection->get_Count(&count), "Unable to get the count of collection.");
|
|
|
|
// Iterate every child to check whether it should be removed.
|
|
USHORT i = 0;
|
|
for (; i < count; ++i) {
|
|
// Get item at index i.
|
|
idx.vt = VT_I2;
|
|
idx.iVal = i;
|
|
CHECK_HRESULT(location_collection->get_Item(idx, &location), "Unable to get item.");
|
|
|
|
BSTR location_path;
|
|
CHECK_HRESULT(location->get_Path(&location_path), "Failed to get location path.");
|
|
if (wcscmp(location_path, kSiteName) == 0) {
|
|
success = true;
|
|
break;
|
|
}
|
|
|
|
SysFreeString(location_path);
|
|
location->Release();
|
|
location = NULL;
|
|
}
|
|
|
|
if (i == count) success = true;
|
|
} while (false);
|
|
|
|
if (!success) {
|
|
break;
|
|
}
|
|
|
|
if (location == NULL) {
|
|
Log(EVENT_CRITICAL, "No location exists. Skip.");
|
|
result = true;
|
|
break;
|
|
}
|
|
|
|
CHECK_HRESULT(location_collection->DeleteLocation(idx), "Failed to remove location.");
|
|
|
|
result = true;
|
|
} while (false);
|
|
|
|
return result;
|
|
}
|
|
*/
|
|
|
|
void CopyBinaries(wchar_t *srcpath, wchar_t *dstpath)
|
|
{
|
|
wchar_t *files[] = { L"libapr-1.dll", L"libapriconv-1.dll", L"libaprutil-1.dll",
|
|
L"libxml2.dll", L"lua5.1.dll", L"pcre.dll", L"zlib1.dll", L"ModSecurityIIS.dll" };
|
|
|
|
for(int i = 0; i < 8; i++)
|
|
{
|
|
wchar_t src[4096];
|
|
wchar_t dst[4096];
|
|
|
|
wcsncpy(src,srcpath,4096);
|
|
wcsncat(src,files[i],4096);
|
|
wcsncpy(dst,dstpath,4096);
|
|
wcsncat(dst,files[i],4096);
|
|
|
|
if(!CopyFile(src, dst, FALSE))
|
|
{
|
|
Iis7Config::Log(EVENT_ERROR, L"Failed to copy binary: %s %s", src, dst);
|
|
}
|
|
}
|
|
}
|
|
|
|
void fixpath(wchar_t *srcdir)
|
|
{
|
|
int l = wcslen(srcdir);
|
|
|
|
if(srcdir[l-1] != '\\')
|
|
{
|
|
srcdir[l] = '\\';
|
|
srcdir[l + 1] = 0;
|
|
}
|
|
}
|
|
|
|
int _tmain(int argc, _TCHAR* argv[])
|
|
{
|
|
if(argc < 2)
|
|
return -1;
|
|
|
|
if(wcscmp(argv[1], L"uninstall") == 0)
|
|
{
|
|
Iis7Config::UninstallFilter();
|
|
return 0;
|
|
}
|
|
|
|
wchar_t srcdir[4096];
|
|
|
|
if(argv[1][0] == '"')
|
|
wcsncpy(srcdir, &argv[1][1], 4096);
|
|
else
|
|
wcsncpy(srcdir, argv[1], 4096);
|
|
|
|
int l = wcslen(srcdir);
|
|
|
|
if(srcdir[l-1] == '"')
|
|
srcdir[l-1] = 0;
|
|
|
|
fixpath(srcdir);
|
|
|
|
wchar_t windir[4096];
|
|
|
|
GetWindowsDirectory(windir, 4096);
|
|
|
|
fixpath(windir);
|
|
|
|
wchar_t crsdir[4096];
|
|
|
|
crsdir[0] = windir[0];
|
|
crsdir[1] = windir[1];
|
|
crsdir[2] = windir[2];
|
|
crsdir[3] = 0;
|
|
|
|
wcsncat(crsdir, L"inetpub", 4096);
|
|
|
|
CreateDirectory(crsdir, NULL);
|
|
|
|
wcsncat(crsdir, L"\\wwwroot", 4096);
|
|
|
|
CreateDirectory(crsdir, NULL);
|
|
|
|
wchar_t zipdir[4096];
|
|
|
|
wcsncpy(zipdir, srcdir, 4096);
|
|
wcsncat(zipdir, L"owasp_crs.zip", 4096);
|
|
|
|
HZIP hzip = OpenZip(crsdir, zipdir, 0, ZIP_FILENAME);
|
|
|
|
if(hzip != 0)
|
|
{
|
|
int z = 0;
|
|
ZIPENTRYW ze;
|
|
|
|
while(GetZipItemW(hzip, z, &ze) == ZR_OK)
|
|
{
|
|
UnzipItem(hzip, z++, ze.name, 0, ZIP_FILENAME);
|
|
}
|
|
|
|
CloseZip(hzip);
|
|
}
|
|
|
|
wchar_t sys32[4096];
|
|
wchar_t syswow[4096];
|
|
wchar_t sysnat[4096];
|
|
|
|
wcsncpy(sys32, windir, 4096);
|
|
wcsncpy(syswow, windir, 4096);
|
|
wcsncpy(sysnat, windir, 4096);
|
|
|
|
wcsncat(sys32, L"system32\\inetsrv\\", 4096);
|
|
wcsncat(syswow, L"SysWow64\\inetsrv\\", 4096);
|
|
wcsncat(sysnat, L"SysNative\\inetsrv\\", 4096);
|
|
|
|
wchar_t src32[4096];
|
|
wchar_t src64[4096];
|
|
|
|
wcsncpy(src32, srcdir, 4096);
|
|
wcsncpy(src64, srcdir, 4096);
|
|
wcsncat(src32, L"x86\\", 4096);
|
|
wcsncat(src64, L"amd64\\", 4096);
|
|
|
|
wchar_t dstconf[4096];
|
|
|
|
if(Iis7Config::GetAppMode() == Iis7Config::MODE_X64)
|
|
{
|
|
CopyBinaries(src32, syswow);
|
|
CopyBinaries(src64, sysnat);
|
|
wcsncpy(dstconf, sysnat, 4096);
|
|
}
|
|
else
|
|
{
|
|
CopyBinaries(src32, sys32);
|
|
wcsncpy(dstconf, sys32, 4096);
|
|
}
|
|
|
|
wcsncat(dstconf, L"config\\schema\\ModSecurity.xml", 4096);
|
|
|
|
wcsncat(srcdir, L"ModSecurity.xml", 4096);
|
|
|
|
if(!CopyFile(srcdir, dstconf, FALSE))
|
|
{
|
|
Iis7Config::Log(EVENT_ERROR, L"Failed to copy config XML: %s %s", srcdir, dstconf);
|
|
}
|
|
|
|
wcsncat(sys32, L"ModSecurityIIS.dll", 4096);
|
|
|
|
Iis7Config::InstallFilter(sys32);
|
|
|
|
return 0;
|
|
}
|