using System; using System.Collections.Generic; using System.Linq; using System.Runtime.InteropServices; using System.Text; using System.Threading.Tasks; namespace Emby.Server.Implementations.Windows { /// /// http://blogs.msdn.com/b/fiddler/archive/2011/12/10/fiddler-windows-8-apps-enable-LoopUtil-network-isolation-exemption.aspx /// public class LoopUtil { //http://msdn.microsoft.com/en-us/library/windows/desktop/aa379595(v=vs.85).aspx [StructLayout(LayoutKind.Sequential)] internal struct SID_AND_ATTRIBUTES { public IntPtr Sid; public uint Attributes; } [StructLayoutAttribute(LayoutKind.Sequential)] internal struct INET_FIREWALL_AC_CAPABILITIES { public uint count; public IntPtr capabilities; //SID_AND_ATTRIBUTES } [StructLayoutAttribute(LayoutKind.Sequential)] internal struct INET_FIREWALL_AC_BINARIES { public uint count; public IntPtr binaries; } [StructLayoutAttribute(LayoutKind.Sequential)] internal struct INET_FIREWALL_APP_CONTAINER { internal IntPtr appContainerSid; internal IntPtr userSid; [MarshalAs(UnmanagedType.LPWStr)] public string appContainerName; [MarshalAs(UnmanagedType.LPWStr)] public string displayName; [MarshalAs(UnmanagedType.LPWStr)] public string description; internal INET_FIREWALL_AC_CAPABILITIES capabilities; internal INET_FIREWALL_AC_BINARIES binaries; [MarshalAs(UnmanagedType.LPWStr)] public string workingDirectory; [MarshalAs(UnmanagedType.LPWStr)] public string packageFullName; } // Call this API to free the memory returned by the Enumeration API [DllImport("FirewallAPI.dll")] internal static extern void NetworkIsolationFreeAppContainers(IntPtr pACs); // Call this API to load the current list of LoopUtil-enabled AppContainers [DllImport("FirewallAPI.dll")] internal static extern uint NetworkIsolationGetAppContainerConfig(out uint pdwCntACs, out IntPtr appContainerSids); // Call this API to set the LoopUtil-exemption list [DllImport("FirewallAPI.dll")] private static extern uint NetworkIsolationSetAppContainerConfig(uint pdwCntACs, SID_AND_ATTRIBUTES[] appContainerSids); // Use this API to convert a string SID into an actual SID [DllImport("advapi32.dll", SetLastError = true)] internal static extern bool ConvertStringSidToSid(string strSid, out IntPtr pSid); [DllImport("advapi32", /*CharSet = CharSet.Auto,*/ SetLastError = true)] static extern bool ConvertSidToStringSid( [MarshalAs(UnmanagedType.LPArray)] byte[] pSID, out IntPtr ptrSid); [DllImport("advapi32", /*CharSet = CharSet.Auto,*/ SetLastError = true)] static extern bool ConvertSidToStringSid(IntPtr pSid, out string strSid); // Use this API to convert a string reference (e.g. "@{blah.pri?ms-resource://whatever}") into a plain string [DllImport("shlwapi.dll", CharSet = CharSet.Unicode, ExactSpelling = true)] internal static extern int SHLoadIndirectString(string pszSource, StringBuilder pszOutBuf); // Call this API to enumerate all of the AppContainers on the system [DllImport("FirewallAPI.dll")] internal static extern uint NetworkIsolationEnumAppContainers(uint Flags, out uint pdwCntPublicACs, out IntPtr ppACs); // DWORD NetworkIsolationEnumAppContainers( // _In_ DWORD Flags, // _Out_ DWORD *pdwNumPublicAppCs, // _Out_ PINET_FIREWALL_APP_CONTAINER *ppPublicAppCs //); //http://msdn.microsoft.com/en-gb/library/windows/desktop/hh968116.aspx enum NETISO_FLAG { NETISO_FLAG_FORCE_COMPUTE_BINARIES = 0x1, NETISO_FLAG_MAX = 0x2 } public class AppContainer { public String appContainerName { get; set; } public String displayName { get; set; } public String workingDirectory { get; set; } public String StringSid { get; set; } public List capabilities { get; set; } public bool LoopUtil { get; set; } public AppContainer(String _appContainerName, String _displayName, String _workingDirectory, IntPtr _sid) { this.appContainerName = _appContainerName; this.displayName = _displayName; this.workingDirectory = _workingDirectory; String tempSid; ConvertSidToStringSid(_sid, out tempSid); this.StringSid = tempSid; } } internal List _AppList; internal List _AppListConfig; public List Apps = new List(); internal IntPtr _pACs; public LoopUtil() { LoadApps(); } public void LoadApps() { Apps.Clear(); _pACs = IntPtr.Zero; //Full List of Apps _AppList = PI_NetworkIsolationEnumAppContainers(); //List of Apps that have LoopUtil enabled. _AppListConfig = PI_NetworkIsolationGetAppContainerConfig(); foreach (var PI_app in _AppList) { AppContainer app = new AppContainer(PI_app.appContainerName, PI_app.displayName, PI_app.workingDirectory, PI_app.appContainerSid); var app_capabilities = LoopUtil.getCapabilites(PI_app.capabilities); if (app_capabilities.Count > 0) { //var sid = new SecurityIdentifier(app_capabilities[0], 0); IntPtr arrayValue = IntPtr.Zero; //var b = LoopUtil.ConvertStringSidToSid(app_capabilities[0].Sid, out arrayValue); //string mysid; //var b = LoopUtil.ConvertSidToStringSid(app_capabilities[0].Sid, out mysid); } app.LoopUtil = CheckLoopback(PI_app.appContainerSid); Apps.Add(app); } } private bool CheckLoopback(IntPtr intPtr) { foreach (SID_AND_ATTRIBUTES item in _AppListConfig) { string left, right; ConvertSidToStringSid(item.Sid, out left); ConvertSidToStringSid(intPtr, out right); if (left == right) { return true; } } return false; } private bool CreateExcemptions(string appName) { var hasChanges = false; foreach (var app in Apps) { if ((app.appContainerName ?? string.Empty).IndexOf(appName, StringComparison.OrdinalIgnoreCase) != -1 || (app.displayName ?? string.Empty).IndexOf(appName, StringComparison.OrdinalIgnoreCase) != -1) { if (!app.LoopUtil) { app.LoopUtil = true; hasChanges = true; } } } return hasChanges; } public static void Run(string appName) { var util = new LoopUtil(); util.LoadApps(); var hasChanges = util.CreateExcemptions(appName); if (hasChanges) { util.SaveLoopbackState(); } util.SaveLoopbackState(); } private static List getCapabilites(INET_FIREWALL_AC_CAPABILITIES cap) { List mycap = new List(); IntPtr arrayValue = cap.capabilities; var structSize = Marshal.SizeOf(typeof(SID_AND_ATTRIBUTES)); for (var i = 0; i < cap.count; i++) { var cur = (SID_AND_ATTRIBUTES)Marshal.PtrToStructure(arrayValue, typeof(SID_AND_ATTRIBUTES)); mycap.Add(cur); arrayValue = new IntPtr((long)(arrayValue) + (long)(structSize)); } return mycap; } private static List getContainerSID(INET_FIREWALL_AC_CAPABILITIES cap) { List mycap = new List(); IntPtr arrayValue = cap.capabilities; var structSize = Marshal.SizeOf(typeof(SID_AND_ATTRIBUTES)); for (var i = 0; i < cap.count; i++) { var cur = (SID_AND_ATTRIBUTES)Marshal.PtrToStructure(arrayValue, typeof(SID_AND_ATTRIBUTES)); mycap.Add(cur); arrayValue = new IntPtr((long)(arrayValue) + (long)(structSize)); } return mycap; } private static List PI_NetworkIsolationGetAppContainerConfig() { IntPtr arrayValue = IntPtr.Zero; uint size = 0; var list = new List(); // Pin down variables GCHandle handle_pdwCntPublicACs = GCHandle.Alloc(size, GCHandleType.Pinned); GCHandle handle_ppACs = GCHandle.Alloc(arrayValue, GCHandleType.Pinned); uint retval = NetworkIsolationGetAppContainerConfig(out size, out arrayValue); var structSize = Marshal.SizeOf(typeof(SID_AND_ATTRIBUTES)); for (var i = 0; i < size; i++) { var cur = (SID_AND_ATTRIBUTES)Marshal.PtrToStructure(arrayValue, typeof(SID_AND_ATTRIBUTES)); list.Add(cur); arrayValue = new IntPtr((long)(arrayValue) + (long)(structSize)); } //release pinned variables. handle_pdwCntPublicACs.Free(); handle_ppACs.Free(); return list; } private List PI_NetworkIsolationEnumAppContainers() { IntPtr arrayValue = IntPtr.Zero; uint size = 0; var list = new List(); // Pin down variables GCHandle handle_pdwCntPublicACs = GCHandle.Alloc(size, GCHandleType.Pinned); GCHandle handle_ppACs = GCHandle.Alloc(arrayValue, GCHandleType.Pinned); //uint retval2 = NetworkIsolationGetAppContainerConfig( out size, out arrayValue); uint retval = NetworkIsolationEnumAppContainers((Int32)NETISO_FLAG.NETISO_FLAG_MAX, out size, out arrayValue); _pACs = arrayValue; //store the pointer so it can be freed when we close the form var structSize = Marshal.SizeOf(typeof(INET_FIREWALL_APP_CONTAINER)); for (var i = 0; i < size; i++) { var cur = (INET_FIREWALL_APP_CONTAINER)Marshal.PtrToStructure(arrayValue, typeof(INET_FIREWALL_APP_CONTAINER)); list.Add(cur); arrayValue = new IntPtr((long)(arrayValue) + (long)(structSize)); } //release pinned variables. handle_pdwCntPublicACs.Free(); handle_ppACs.Free(); return list; } public bool SaveLoopbackState() { var countEnabled = CountEnabledLoopUtil(); SID_AND_ATTRIBUTES[] arr = new SID_AND_ATTRIBUTES[countEnabled]; int count = 0; for (int i = 0; i < Apps.Count; i++) { if (Apps[i].LoopUtil) { arr[count].Attributes = 0; //TO DO: IntPtr ptr; ConvertStringSidToSid(Apps[i].StringSid, out ptr); arr[count].Sid = ptr; count++; } } if (NetworkIsolationSetAppContainerConfig((uint)countEnabled, arr) == 0) { return true; } else { return false; } } private int CountEnabledLoopUtil() { var count = 0; for (int i = 0; i < Apps.Count; i++) { if (Apps[i].LoopUtil) { count++; } } return count; } public void FreeResources() { NetworkIsolationFreeAppContainers(_pACs); } } }