diff options
| -rw-r--r-- | tun/wintun/namespaceapi/mksyscall.go | 8 | ||||
| -rw-r--r-- | tun/wintun/namespaceapi/namespaceapi_windows.go | 83 | ||||
| -rw-r--r-- | tun/wintun/namespaceapi/zsyscall_windows.go | 116 |
3 files changed, 207 insertions, 0 deletions
diff --git a/tun/wintun/namespaceapi/mksyscall.go b/tun/wintun/namespaceapi/mksyscall.go new file mode 100644 index 0000000..c4c9595 --- /dev/null +++ b/tun/wintun/namespaceapi/mksyscall.go @@ -0,0 +1,8 @@ +/* SPDX-License-Identifier: MIT + * + * Copyright (C) 2019 WireGuard LLC. All Rights Reserved. + */ + +package namespaceapi + +//go:generate go run $GOROOT/src/syscall/mksyscall_windows.go -output zsyscall_windows.go namespaceapi_windows.go diff --git a/tun/wintun/namespaceapi/namespaceapi_windows.go b/tun/wintun/namespaceapi/namespaceapi_windows.go new file mode 100644 index 0000000..a7637ae --- /dev/null +++ b/tun/wintun/namespaceapi/namespaceapi_windows.go @@ -0,0 +1,83 @@ +/* SPDX-License-Identifier: MIT + * + * Copyright (C) 2019 WireGuard LLC. All Rights Reserved. + */ + +package namespaceapi + +import "golang.org/x/sys/windows" + +//sys createBoundaryDescriptor(name *uint16, flags uint32) (handle windows.Handle, err error) = kernel32.CreateBoundaryDescriptorW +//sys deleteBoundaryDescriptor(boundaryDescriptor windows.Handle) = kernel32.DeleteBoundaryDescriptor +//sys addSIDToBoundaryDescriptor(boundaryDescriptor windows.Handle, requiredSid *windows.SID) (err error) = kernel32.AddSIDToBoundaryDescriptor +//sys createPrivateNamespace(privateNamespaceAttributes *windows.SecurityAttributes, boundaryDescriptor windows.Handle, aliasPrefix *uint16) (handle windows.Handle, err error) = kernel32.CreatePrivateNamespaceW +//sys openPrivateNamespace(boundaryDescriptor windows.Handle, aliasPrefix *uint16) (handle windows.Handle, err error) = kernel32.OpenPrivateNamespaceW +//sys closePrivateNamespace(handle windows.Handle, flags uint32) (err error) = kernel32.ClosePrivateNamespace + +// BoundaryDescriptor represents a boundary that defines how the objects in the namespace are to be isolated. +type BoundaryDescriptor windows.Handle + +// CreateBoundaryDescriptor creates a boundary descriptor. +func CreateBoundaryDescriptor(name string) (BoundaryDescriptor, error) { + name16, err := windows.UTF16PtrFromString(name) + if err != nil { + return 0, err + } + handle, err := createBoundaryDescriptor(name16, 0) + if err != nil { + return 0, err + } + return BoundaryDescriptor(handle), nil +} + +// Delete deletes the specified boundary descriptor. +func (bd BoundaryDescriptor) Delete() { + deleteBoundaryDescriptor(windows.Handle(bd)) +} + +// AddSid adds a security identifier (SID) to the specified boundary descriptor. +func (bd BoundaryDescriptor) AddSid(requiredSid *windows.SID) error { + return addSIDToBoundaryDescriptor(windows.Handle(bd), requiredSid) +} + +// PrivateNamespace represents a private namespace. Duh?! +type PrivateNamespace windows.Handle + +// CreatePrivateNamespace creates a private namespace. +func CreatePrivateNamespace(privateNamespaceAttributes *windows.SecurityAttributes, boundaryDescriptor BoundaryDescriptor, aliasPrefix string) (PrivateNamespace, error) { + aliasPrefix16, err := windows.UTF16PtrFromString(aliasPrefix) + if err != nil { + return 0, err + } + handle, err := createPrivateNamespace(privateNamespaceAttributes, windows.Handle(boundaryDescriptor), aliasPrefix16) + if err != nil { + return 0, err + } + return PrivateNamespace(handle), nil +} + +// OpenPrivateNamespace opens a private namespace. +func OpenPrivateNamespace(boundaryDescriptor BoundaryDescriptor, aliasPrefix string) (PrivateNamespace, error) { + aliasPrefix16, err := windows.UTF16PtrFromString(aliasPrefix) + if err != nil { + return 0, err + } + handle, err := openPrivateNamespace(windows.Handle(boundaryDescriptor), aliasPrefix16) + if err != nil { + return 0, err + } + return PrivateNamespace(handle), nil +} + +// ClosePrivateNamespaceFlags describes flags that are used by PrivateNamespace's Close() method. +type ClosePrivateNamespaceFlags uint32 + +const ( + // PrivateNamespaceFlagDestroy makes the close to destroy the namespace. + PrivateNamespaceFlagDestroy = ClosePrivateNamespaceFlags(0x1) +) + +// Close closes an open namespace handle. +func (pns PrivateNamespace) Close(flags ClosePrivateNamespaceFlags) error { + return closePrivateNamespace(windows.Handle(pns), uint32(flags)) +} diff --git a/tun/wintun/namespaceapi/zsyscall_windows.go b/tun/wintun/namespaceapi/zsyscall_windows.go new file mode 100644 index 0000000..83295e1 --- /dev/null +++ b/tun/wintun/namespaceapi/zsyscall_windows.go @@ -0,0 +1,116 @@ +// Code generated by 'go generate'; DO NOT EDIT. + +package namespaceapi + +import ( + "syscall" + "unsafe" + + "golang.org/x/sys/windows" +) + +var _ unsafe.Pointer + +// Do the interface allocations only once for common +// Errno values. +const ( + errnoERROR_IO_PENDING = 997 +) + +var ( + errERROR_IO_PENDING error = syscall.Errno(errnoERROR_IO_PENDING) +) + +// errnoErr returns common boxed Errno values, to prevent +// allocations at runtime. +func errnoErr(e syscall.Errno) error { + switch e { + case 0: + return nil + case errnoERROR_IO_PENDING: + return errERROR_IO_PENDING + } + // TODO: add more here, after collecting data on the common + // error values see on Windows. (perhaps when running + // all.bat?) + return e +} + +var ( + modkernel32 = windows.NewLazySystemDLL("kernel32.dll") + + procCreateBoundaryDescriptorW = modkernel32.NewProc("CreateBoundaryDescriptorW") + procDeleteBoundaryDescriptor = modkernel32.NewProc("DeleteBoundaryDescriptor") + procAddSIDToBoundaryDescriptor = modkernel32.NewProc("AddSIDToBoundaryDescriptor") + procCreatePrivateNamespaceW = modkernel32.NewProc("CreatePrivateNamespaceW") + procOpenPrivateNamespaceW = modkernel32.NewProc("OpenPrivateNamespaceW") + procClosePrivateNamespace = modkernel32.NewProc("ClosePrivateNamespace") +) + +func createBoundaryDescriptor(name *uint16, flags uint32) (handle windows.Handle, err error) { + r0, _, e1 := syscall.Syscall(procCreateBoundaryDescriptorW.Addr(), 2, uintptr(unsafe.Pointer(name)), uintptr(flags), 0) + handle = windows.Handle(r0) + if handle == 0 { + if e1 != 0 { + err = errnoErr(e1) + } else { + err = syscall.EINVAL + } + } + return +} + +func deleteBoundaryDescriptor(boundaryDescriptor windows.Handle) { + syscall.Syscall(procDeleteBoundaryDescriptor.Addr(), 1, uintptr(boundaryDescriptor), 0, 0) + return +} + +func addSIDToBoundaryDescriptor(boundaryDescriptor windows.Handle, requiredSid *windows.SID) (err error) { + r1, _, e1 := syscall.Syscall(procAddSIDToBoundaryDescriptor.Addr(), 2, uintptr(boundaryDescriptor), uintptr(unsafe.Pointer(requiredSid)), 0) + if r1 == 0 { + if e1 != 0 { + err = errnoErr(e1) + } else { + err = syscall.EINVAL + } + } + return +} + +func createPrivateNamespace(privateNamespaceAttributes *windows.SecurityAttributes, boundaryDescriptor windows.Handle, aliasPrefix *uint16) (handle windows.Handle, err error) { + r0, _, e1 := syscall.Syscall(procCreatePrivateNamespaceW.Addr(), 3, uintptr(unsafe.Pointer(privateNamespaceAttributes)), uintptr(boundaryDescriptor), uintptr(unsafe.Pointer(aliasPrefix))) + handle = windows.Handle(r0) + if handle == 0 { + if e1 != 0 { + err = errnoErr(e1) + } else { + err = syscall.EINVAL + } + } + return +} + +func openPrivateNamespace(boundaryDescriptor windows.Handle, aliasPrefix *uint16) (handle windows.Handle, err error) { + r0, _, e1 := syscall.Syscall(procOpenPrivateNamespaceW.Addr(), 2, uintptr(boundaryDescriptor), uintptr(unsafe.Pointer(aliasPrefix)), 0) + handle = windows.Handle(r0) + if handle == 0 { + if e1 != 0 { + err = errnoErr(e1) + } else { + err = syscall.EINVAL + } + } + return +} + +func closePrivateNamespace(handle windows.Handle, flags uint32) (err error) { + r1, _, e1 := syscall.Syscall(procClosePrivateNamespace.Addr(), 2, uintptr(handle), uintptr(flags), 0) + if r1 == 0 { + if e1 != 0 { + err = errnoErr(e1) + } else { + err = syscall.EINVAL + } + } + return +} |