| 1 | 
 /** | 
 
 
 
 
 
 | 2 | 
  * This file is part of the mingw-w64 runtime package. | 
 
 
 
 
 
 | 3 | 
  * No warranty is given; refer to the file DISCLAIMER within this package. | 
 
 
 
 
 
 | 4 | 
  */ | 
 
 
 
 
 
 | 5 | 
  | 
 
 
 
 
 
 | 6 | 
 #include <winapifamily.h> | 
 
 
 
 
 
 | 7 | 
  | 
 
 
 
 
 
 | 8 | 
 #ifndef _ADTGEN_H | 
 
 
 
 
 
 | 9 | 
 #define _ADTGEN_H | 
 
 
 
 
 
 | 10 | 
  | 
 
 
 
 
 
 | 11 | 
 #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_DESKTOP) | 
 
 
 
 
 
 | 12 | 
  | 
 
 
 
 
 
 | 13 | 
 #define AUDIT_TYPE_LEGACY 1 | 
 
 
 
 
 
 | 14 | 
 #define AUDIT_TYPE_WMI 2 | 
 
 
 
 
 
 | 15 | 
  | 
 
 
 
 
 
 | 16 | 
 typedef enum _AUDIT_PARAM_TYPE { | 
 
 
 
 
 
 | 17 | 
   APT_None = 1, | 
 
 
 
 
 
 | 18 | 
   APT_String, | 
 
 
 
 
 
 | 19 | 
   APT_Ulong, | 
 
 
 
 
 
 | 20 | 
   APT_Pointer, | 
 
 
 
 
 
 | 21 | 
   APT_Sid, | 
 
 
 
 
 
 | 22 | 
   APT_LogonId, | 
 
 
 
 
 
 | 23 | 
   APT_ObjectTypeList, | 
 
 
 
 
 
 | 24 | 
   APT_Luid, | 
 
 
 
 
 
 | 25 | 
   APT_Guid, | 
 
 
 
 
 
 | 26 | 
   APT_Time, | 
 
 
 
 
 
 | 27 | 
   APT_Int64, | 
 
 
 
 
 
 | 28 | 
   APT_IpAddress, | 
 
 
 
 
 
 | 29 | 
   APT_LogonIdWithSid | 
 
 
 
 
 
 | 30 | 
 } AUDIT_PARAM_TYPE; | 
 
 
 
 
 
 | 31 | 
  | 
 
 
 
 
 
 | 32 | 
 #define AP_ParamTypeBits 8 | 
 
 
 
 
 
 | 33 | 
 #define AP_ParamTypeMask __MSABI_LONG(0xff) | 
 
 
 
 
 
 | 34 | 
  | 
 
 
 
 
 
 | 35 | 
 #define AP_FormatHex (__MSABI_LONG(0x1) << AP_ParamTypeBits) | 
 
 
 
 
 
 | 36 | 
 #define AP_AccessMask (__MSABI_LONG(0x2) << AP_ParamTypeBits) | 
 
 
 
 
 
 | 37 | 
 #define AP_Filespec (__MSABI_LONG(0x1) << AP_ParamTypeBits) | 
 
 
 
 
 
 | 38 | 
 #define AP_SidAsLogonId (__MSABI_LONG(0x1) << AP_ParamTypeBits) | 
 
 
 
 
 
 | 39 | 
 #define AP_PrimaryLogonId (__MSABI_LONG(0x1) << AP_ParamTypeBits) | 
 
 
 
 
 
 | 40 | 
 #define AP_ClientLogonId (__MSABI_LONG(0x2) << AP_ParamTypeBits) | 
 
 
 
 
 
 | 41 | 
 #define ApExtractType(TypeFlags) ((AUDIT_PARAM_TYPE) (TypeFlags & AP_ParamTypeMask)) | 
 
 
 
 
 
 | 42 | 
 #define ApExtractFlags(TypeFlags) ((TypeFlags & ~AP_ParamTypeMask)) | 
 
 
 
 
 
 | 43 | 
  | 
 
 
 
 
 
 | 44 | 
 #define _AUTHZ_SS_MAXSIZE 128 | 
 
 
 
 
 
 | 45 | 
  | 
 
 
 
 
 
 | 46 | 
 #define APF_AuditFailure 0x0 | 
 
 
 
 
 
 | 47 | 
 #define APF_AuditSuccess 0x1 | 
 
 
 
 
 
 | 48 | 
  | 
 
 
 
 
 
 | 49 | 
 #define APF_ValidFlags (APF_AuditSuccess) | 
 
 
 
 
 
 | 50 | 
  | 
 
 
 
 
 
 | 51 | 
 #define AUTHZ_ALLOW_MULTIPLE_SOURCE_INSTANCES 0x1 | 
 
 
 
 
 
 | 52 | 
 #define AUTHZ_MIGRATED_LEGACY_PUBLISHER 0x2 | 
 
 
 
 
 
 | 53 | 
  | 
 
 
 
 
 
 | 54 | 
 #define AUTHZ_AUDIT_INSTANCE_INFORMATION 0x2 | 
 
 
 
 
 
 | 55 | 
  | 
 
 
 
 
 
 | 56 | 
 typedef struct _AUDIT_OBJECT_TYPE { | 
 
 
 
 
 
 | 57 | 
   GUID ObjectType; | 
 
 
 
 
 
 | 58 | 
   USHORT Flags; | 
 
 
 
 
 
 | 59 | 
   USHORT Level; | 
 
 
 
 
 
 | 60 | 
   ACCESS_MASK AccessMask; | 
 
 
 
 
 
 | 61 | 
 } AUDIT_OBJECT_TYPE,*PAUDIT_OBJECT_TYPE; | 
 
 
 
 
 
 | 62 | 
  | 
 
 
 
 
 
 | 63 | 
 typedef struct _AUDIT_OBJECT_TYPES { | 
 
 
 
 
 
 | 64 | 
   USHORT Count; | 
 
 
 
 
 
 | 65 | 
   USHORT Flags; | 
 
 
 
 
 
 | 66 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 67 | 
   [size_is (Count)] | 
 
 
 
 
 
 | 68 | 
 #endif | 
 
 
 
 
 
 | 69 | 
   AUDIT_OBJECT_TYPE *pObjectTypes; | 
 
 
 
 
 
 | 70 | 
 } AUDIT_OBJECT_TYPES,*PAUDIT_OBJECT_TYPES; | 
 
 
 
 
 
 | 71 | 
  | 
 
 
 
 
 
 | 72 | 
 typedef struct _AUDIT_IP_ADDRESS { | 
 
 
 
 
 
 | 73 | 
   BYTE pIpAddress[_AUTHZ_SS_MAXSIZE]; | 
 
 
 
 
 
 | 74 | 
 } AUDIT_IP_ADDRESS,*PAUDIT_IP_ADDRESS; | 
 
 
 
 
 
 | 75 | 
  | 
 
 
 
 
 
 | 76 | 
 typedef struct _AUDIT_PARAM { | 
 
 
 
 
 
 | 77 | 
   AUDIT_PARAM_TYPE Type; | 
 
 
 
 
 
 | 78 | 
   ULONG Length; | 
 
 
 
 
 
 | 79 | 
   DWORD Flags; | 
 
 
 
 
 
 | 80 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 81 | 
   [switch_type (AUDIT_PARAM_TYPE), switch_is (Type)] | 
 
 
 
 
 
 | 82 | 
 #else | 
 
 
 
 
 
 | 83 | 
   __C89_NAMELESS | 
 
 
 
 
 
 | 84 | 
 #endif | 
 
 
 
 
 
 | 85 | 
   union { | 
 
 
 
 
 
 | 86 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 87 | 
     [default] | 
 
 
 
 
 
 | 88 | 
 #endif | 
 
 
 
 
 
 | 89 | 
     ULONG_PTR Data0; | 
 
 
 
 
 
 | 90 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 91 | 
     [case (APT_String)] | 
 
 
 
 
 
 | 92 | 
     [string] | 
 
 
 
 
 
 | 93 | 
 #endif | 
 
 
 
 
 
 | 94 | 
     PWSTR String; | 
 
 
 
 
 
 | 95 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 96 | 
     [case (APT_Ulong, APT_Pointer)] | 
 
 
 
 
 
 | 97 | 
 #endif | 
 
 
 
 
 
 | 98 | 
     ULONG_PTR u; | 
 
 
 
 
 
 | 99 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 100 | 
     [case (APT_Sid)] | 
 
 
 
 
 
 | 101 | 
 #endif | 
 
 
 
 
 
 | 102 | 
     SID *psid; | 
 
 
 
 
 
 | 103 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 104 | 
     [case (APT_Guid)] | 
 
 
 
 
 
 | 105 | 
 #endif | 
 
 
 
 
 
 | 106 | 
     GUID *pguid; | 
 
 
 
 
 
 | 107 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 108 | 
     [case (APT_LogonId)] | 
 
 
 
 
 
 | 109 | 
 #endif | 
 
 
 
 
 
 | 110 | 
     ULONG LogonId_LowPart; | 
 
 
 
 
 
 | 111 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 112 | 
     [case (APT_ObjectTypeList)] | 
 
 
 
 
 
 | 113 | 
 #endif | 
 
 
 
 
 
 | 114 | 
     AUDIT_OBJECT_TYPES *pObjectTypes; | 
 
 
 
 
 
 | 115 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 116 | 
     [case (APT_IpAddress)] | 
 
 
 
 
 
 | 117 | 
 #endif | 
 
 
 
 
 
 | 118 | 
     AUDIT_IP_ADDRESS *pIpAddress; | 
 
 
 
 
 
 | 119 | 
   }; | 
 
 
 
 
 
 | 120 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 121 | 
   [switch_type (AUDIT_PARAM_TYPE), switch_is (Type)] | 
 
 
 
 
 
 | 122 | 
 #else | 
 
 
 
 
 
 | 123 | 
   __C89_NAMELESS | 
 
 
 
 
 
 | 124 | 
 #endif | 
 
 
 
 
 
 | 125 | 
   union { | 
 
 
 
 
 
 | 126 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 127 | 
     [default] | 
 
 
 
 
 
 | 128 | 
 #endif | 
 
 
 
 
 
 | 129 | 
     ULONG_PTR Data1; | 
 
 
 
 
 
 | 130 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 131 | 
     [case (APT_LogonId)] | 
 
 
 
 
 
 | 132 | 
 #endif | 
 
 
 
 
 
 | 133 | 
     LONG LogonId_HighPart; | 
 
 
 
 
 
 | 134 | 
   }; | 
 
 
 
 
 
 | 135 | 
 } AUDIT_PARAM,*PAUDIT_PARAM; | 
 
 
 
 
 
 | 136 | 
  | 
 
 
 
 
 
 | 137 | 
 typedef struct _AUDIT_PARAMS { | 
 
 
 
 
 
 | 138 | 
   ULONG Length; | 
 
 
 
 
 
 | 139 | 
   DWORD Flags; | 
 
 
 
 
 
 | 140 | 
   USHORT Count; | 
 
 
 
 
 
 | 141 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 142 | 
   [size_is (Count)] | 
 
 
 
 
 
 | 143 | 
 #endif | 
 
 
 
 
 
 | 144 | 
   AUDIT_PARAM *Parameters; | 
 
 
 
 
 
 | 145 | 
 } AUDIT_PARAMS,*PAUDIT_PARAMS; | 
 
 
 
 
 
 | 146 | 
 typedef struct _AUTHZ_AUDIT_EVENT_TYPE_LEGACY { | 
 
 
 
 
 
 | 147 | 
   USHORT CategoryId; | 
 
 
 
 
 
 | 148 | 
   USHORT AuditId; | 
 
 
 
 
 
 | 149 | 
   USHORT ParameterCount; | 
 
 
 
 
 
 | 150 | 
 } AUTHZ_AUDIT_EVENT_TYPE_LEGACY,*PAUTHZ_AUDIT_EVENT_TYPE_LEGACY; | 
 
 
 
 
 
 | 151 | 
  | 
 
 
 
 
 
 | 152 | 
 typedef | 
 
 
 
 
 
 | 153 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 154 | 
 [switch_type (BYTE)] | 
 
 
 
 
 
 | 155 | 
 #endif | 
 
 
 
 
 
 | 156 | 
 union _AUTHZ_AUDIT_EVENT_TYPE_UNION { | 
 
 
 
 
 
 | 157 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 158 | 
   [case (AUDIT_TYPE_LEGACY)] | 
 
 
 
 
 
 | 159 | 
 #endif | 
 
 
 
 
 
 | 160 | 
   AUTHZ_AUDIT_EVENT_TYPE_LEGACY Legacy; | 
 
 
 
 
 
 | 161 | 
 } AUTHZ_AUDIT_EVENT_TYPE_UNION,*PAUTHZ_AUDIT_EVENT_TYPE_UNION; | 
 
 
 
 
 
 | 162 | 
  | 
 
 
 
 
 
 | 163 | 
 typedef | 
 
 
 
 
 
 | 164 | 
 struct _AUTHZ_AUDIT_EVENT_TYPE_OLD { | 
 
 
 
 
 
 | 165 | 
   ULONG Version; | 
 
 
 
 
 
 | 166 | 
   DWORD dwFlags; | 
 
 
 
 
 
 | 167 | 
   LONG RefCount; | 
 
 
 
 
 
 | 168 | 
   ULONG_PTR hAudit; | 
 
 
 
 
 
 | 169 | 
   LUID LinkId; | 
 
 
 
 
 
 | 170 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 171 | 
   [switch_is (Version)] | 
 
 
 
 
 
 | 172 | 
 #endif | 
 
 
 
 
 
 | 173 | 
   AUTHZ_AUDIT_EVENT_TYPE_UNION u; | 
 
 
 
 
 
 | 174 | 
 } AUTHZ_AUDIT_EVENT_TYPE_OLD; | 
 
 
 
 
 
 | 175 | 
  | 
 
 
 
 
 
 | 176 | 
 typedef | 
 
 
 
 
 
 | 177 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 178 | 
 [handle] | 
 
 
 
 
 
 | 179 | 
 #endif | 
 
 
 
 
 
 | 180 | 
 AUTHZ_AUDIT_EVENT_TYPE_OLD *PAUTHZ_AUDIT_EVENT_TYPE_OLD; | 
 
 
 
 
 
 | 181 | 
 #define AUTHZP_WPD_EVENT 0x10 | 
 
 
 
 
 
 | 182 | 
  | 
 
 
 
 
 
 | 183 | 
 typedef | 
 
 
 
 
 
 | 184 | 
 #ifdef __WIDL__ | 
 
 
 
 
 
 | 185 | 
 [context_handle] | 
 
 
 
 
 
 | 186 | 
 #endif | 
 
 
 
 
 
 | 187 | 
 PVOID AUDIT_HANDLE,*PAUDIT_HANDLE; | 
 
 
 
 
 
 | 188 | 
  | 
 
 
 
 
 
 | 189 | 
 #endif | 
 
 
 
 
 
 | 190 | 
 #endif |