1/**
2 * This file is part of the mingw-w64 runtime package.
3 * No warranty is given; refer to the file DISCLAIMER within this package.
4 */
5
6#include <winapifamily.h>
7
8#ifndef _ADTGEN_H
9#define _ADTGEN_H
10
11#if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_DESKTOP)
12
13#define AUDIT_TYPE_LEGACY 1
14#define AUDIT_TYPE_WMI 2
15
16typedef enum _AUDIT_PARAM_TYPE {
17 APT_None = 1,
18 APT_String,
19 APT_Ulong,
20 APT_Pointer,
21 APT_Sid,
22 APT_LogonId,
23 APT_ObjectTypeList,
24 APT_Luid,
25 APT_Guid,
26 APT_Time,
27 APT_Int64,
28 APT_IpAddress,
29 APT_LogonIdWithSid
30} AUDIT_PARAM_TYPE;
31
32#define AP_ParamTypeBits 8
33#define AP_ParamTypeMask __MSABI_LONG(0xff)
34
35#define AP_FormatHex (__MSABI_LONG(0x1) << AP_ParamTypeBits)
36#define AP_AccessMask (__MSABI_LONG(0x2) << AP_ParamTypeBits)
37#define AP_Filespec (__MSABI_LONG(0x1) << AP_ParamTypeBits)
38#define AP_SidAsLogonId (__MSABI_LONG(0x1) << AP_ParamTypeBits)
39#define AP_PrimaryLogonId (__MSABI_LONG(0x1) << AP_ParamTypeBits)
40#define AP_ClientLogonId (__MSABI_LONG(0x2) << AP_ParamTypeBits)
41#define ApExtractType(TypeFlags) ((AUDIT_PARAM_TYPE) (TypeFlags & AP_ParamTypeMask))
42#define ApExtractFlags(TypeFlags) ((TypeFlags & ~AP_ParamTypeMask))
43
44#define _AUTHZ_SS_MAXSIZE 128
45
46#define APF_AuditFailure 0x0
47#define APF_AuditSuccess 0x1
48
49#define APF_ValidFlags (APF_AuditSuccess)
50
51#define AUTHZ_ALLOW_MULTIPLE_SOURCE_INSTANCES 0x1
52#define AUTHZ_MIGRATED_LEGACY_PUBLISHER 0x2
53
54#define AUTHZ_AUDIT_INSTANCE_INFORMATION 0x2
55
56typedef struct _AUDIT_OBJECT_TYPE {
57 GUID ObjectType;
58 USHORT Flags;
59 USHORT Level;
60 ACCESS_MASK AccessMask;
61} AUDIT_OBJECT_TYPE,*PAUDIT_OBJECT_TYPE;
62
63typedef struct _AUDIT_OBJECT_TYPES {
64 USHORT Count;
65 USHORT Flags;
66#ifdef __WIDL__
67 [size_is (Count)]
68#endif
69 AUDIT_OBJECT_TYPE *pObjectTypes;
70} AUDIT_OBJECT_TYPES,*PAUDIT_OBJECT_TYPES;
71
72typedef struct _AUDIT_IP_ADDRESS {
73 BYTE pIpAddress[_AUTHZ_SS_MAXSIZE];
74} AUDIT_IP_ADDRESS,*PAUDIT_IP_ADDRESS;
75
76typedef struct _AUDIT_PARAM {
77 AUDIT_PARAM_TYPE Type;
78 ULONG Length;
79 DWORD Flags;
80#ifdef __WIDL__
81 [switch_type (AUDIT_PARAM_TYPE), switch_is (Type)]
82#else
83 __C89_NAMELESS
84#endif
85 union {
86#ifdef __WIDL__
87 [default]
88#endif
89 ULONG_PTR Data0;
90#ifdef __WIDL__
91 [case (APT_String)]
92 [string]
93#endif
94 PWSTR String;
95#ifdef __WIDL__
96 [case (APT_Ulong, APT_Pointer)]
97#endif
98 ULONG_PTR u;
99#ifdef __WIDL__
100 [case (APT_Sid)]
101#endif
102 SID *psid;
103#ifdef __WIDL__
104 [case (APT_Guid)]
105#endif
106 GUID *pguid;
107#ifdef __WIDL__
108 [case (APT_LogonId)]
109#endif
110 ULONG LogonId_LowPart;
111#ifdef __WIDL__
112 [case (APT_ObjectTypeList)]
113#endif
114 AUDIT_OBJECT_TYPES *pObjectTypes;
115#ifdef __WIDL__
116 [case (APT_IpAddress)]
117#endif
118 AUDIT_IP_ADDRESS *pIpAddress;
119 };
120#ifdef __WIDL__
121 [switch_type (AUDIT_PARAM_TYPE), switch_is (Type)]
122#else
123 __C89_NAMELESS
124#endif
125 union {
126#ifdef __WIDL__
127 [default]
128#endif
129 ULONG_PTR Data1;
130#ifdef __WIDL__
131 [case (APT_LogonId)]
132#endif
133 LONG LogonId_HighPart;
134 };
135} AUDIT_PARAM,*PAUDIT_PARAM;
136
137typedef struct _AUDIT_PARAMS {
138 ULONG Length;
139 DWORD Flags;
140 USHORT Count;
141#ifdef __WIDL__
142 [size_is (Count)]
143#endif
144 AUDIT_PARAM *Parameters;
145} AUDIT_PARAMS,*PAUDIT_PARAMS;
146typedef struct _AUTHZ_AUDIT_EVENT_TYPE_LEGACY {
147 USHORT CategoryId;
148 USHORT AuditId;
149 USHORT ParameterCount;
150} AUTHZ_AUDIT_EVENT_TYPE_LEGACY,*PAUTHZ_AUDIT_EVENT_TYPE_LEGACY;
151
152typedef
153#ifdef __WIDL__
154[switch_type (BYTE)]
155#endif
156union _AUTHZ_AUDIT_EVENT_TYPE_UNION {
157#ifdef __WIDL__
158 [case (AUDIT_TYPE_LEGACY)]
159#endif
160 AUTHZ_AUDIT_EVENT_TYPE_LEGACY Legacy;
161} AUTHZ_AUDIT_EVENT_TYPE_UNION,*PAUTHZ_AUDIT_EVENT_TYPE_UNION;
162
163typedef
164struct _AUTHZ_AUDIT_EVENT_TYPE_OLD {
165 ULONG Version;
166 DWORD dwFlags;
167 LONG RefCount;
168 ULONG_PTR hAudit;
169 LUID LinkId;
170#ifdef __WIDL__
171 [switch_is (Version)]
172#endif
173 AUTHZ_AUDIT_EVENT_TYPE_UNION u;
174} AUTHZ_AUDIT_EVENT_TYPE_OLD;
175
176typedef
177#ifdef __WIDL__
178[handle]
179#endif
180AUTHZ_AUDIT_EVENT_TYPE_OLD *PAUTHZ_AUDIT_EVENT_TYPE_OLD;
181#define AUTHZP_WPD_EVENT 0x10
182
183typedef
184#ifdef __WIDL__
185[context_handle]
186#endif
187PVOID AUDIT_HANDLE,*PAUDIT_HANDLE;
188
189#endif
190#endif