sddl

package

Go to main page

Versions in this module

v10

v10.25.0-Preview-1

Apr 2, 2024

v10.24.0

Mar 26, 2024

v10.23.0

Jan 23, 2024

v10.22.2

Jan 9, 2024

v10.22.1

Dec 19, 2023

v10.22.0

Dec 5, 2023

v10.22.0-Preview

Oct 23, 2023

v10.21.2

Nov 1, 2023

v10.21.1

Oct 25, 2023

v10.21.0

Sep 29, 2023

v10.21.0-Preview

Aug 15, 2023

v10.20.1

Aug 8, 2023

v10.20.0

Jul 26, 2023

v10.19.0

May 30, 2023

v10.18.1

Apr 20, 2023

v10.18.0

Mar 31, 2023

v10.17.0

Jan 23, 2023

Changes in this version

+ const ACCESS_ALLOWED_ACE_TYPE — linux/amd64

+ const ACCESS_ALLOWED_CALLBACK_ACE_TYPE — linux/amd64

+ const ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE — linux/amd64

+ const ACCESS_ALLOWED_COMPOUND_ACE_TYPE — linux/amd64

+ const ACCESS_ALLOWED_OBJECT_ACE_TYPE — linux/amd64

+ const ACCESS_DENIED_ACE_TYPE — linux/amd64

+ const ACCESS_DENIED_CALLBACK_ACE_TYPE — linux/amd64

+ const ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE — linux/amd64

+ const ACCESS_DENIED_OBJECT_ACE_TYPE — linux/amd64

+ const ACCESS_MAX_MS_ACE_TYPE — linux/amd64

+ const ACCESS_MAX_MS_OBJECT_ACE_TYPE — linux/amd64

+ const ACCESS_MAX_MS_V2_ACE_TYPE — linux/amd64

+ const ACCESS_MAX_MS_V3_ACE_TYPE — linux/amd64

+ const ACCESS_MAX_MS_V4_ACE_TYPE — linux/amd64

+ const ACCESS_MAX_MS_V5_ACE_TYPE — linux/amd64

+ const ACCESS_MIN_MS_ACE_TYPE — linux/amd64

+ const ACCESS_MIN_MS_OBJECT_ACE_TYPE — linux/amd64

+ const ACL_REVISION — linux/amd64

+ const ACL_REVISION_DS — linux/amd64

+ const ADS_RIGHT_ACTRL_DS_LIST — linux/amd64

+ const ADS_RIGHT_DS_CONTROL_ACCESS — linux/amd64

+ const ADS_RIGHT_DS_CREATE_CHILD — linux/amd64

+ const ADS_RIGHT_DS_DELETE_CHILD — linux/amd64

+ const ADS_RIGHT_DS_DELETE_TREE — linux/amd64

+ const ADS_RIGHT_DS_LIST_OBJECT — linux/amd64

+ const ADS_RIGHT_DS_READ_PROP — linux/amd64

+ const ADS_RIGHT_DS_SELF — linux/amd64

+ const ADS_RIGHT_DS_WRITE_PROP — linux/amd64

+ const ATTRIBUTE_SECURITY_INFORMATION — linux/amd64

+ const BACKUP_SECURITY_INFORMATION — linux/amd64

+ const CONTAINER_INHERIT_ACE — linux/amd64

+ const CRITICAL_ACE_FLAG — linux/amd64

+ const DACL_SECURITY_INFORMATION — linux/amd64

+ const DELETE — linux/amd64

+ const DOMAIN_ALIAS_RID_ACCESS_CONTROL_ASSISTANCE_OPS — linux/amd64

+ const DOMAIN_ALIAS_RID_ACCOUNT_OPS — linux/amd64

+ const DOMAIN_ALIAS_RID_ADMINS — linux/amd64

+ const DOMAIN_ALIAS_RID_AUTHORIZATIONACCESS — linux/amd64

+ const DOMAIN_ALIAS_RID_BACKUP_OPS — linux/amd64

+ const DOMAIN_ALIAS_RID_CACHEABLE_PRINCIPALS_GROUP — linux/amd64

+ const DOMAIN_ALIAS_RID_CERTSVC_DCOM_ACCESS_GROUP — linux/amd64

+ const DOMAIN_ALIAS_RID_CRYPTO_OPERATORS — linux/amd64

+ const DOMAIN_ALIAS_RID_DCOM_USERS — linux/amd64

+ const DOMAIN_ALIAS_RID_DEFAULT_ACCOUNT — linux/amd64

+ const DOMAIN_ALIAS_RID_DEVICE_OWNERS — linux/amd64

+ const DOMAIN_ALIAS_RID_EVENT_LOG_READERS_GROUP — linux/amd64

+ const DOMAIN_ALIAS_RID_GUESTS — linux/amd64

+ const DOMAIN_ALIAS_RID_HYPER_V_ADMINS — linux/amd64

+ const DOMAIN_ALIAS_RID_INCOMING_FOREST_TRUST_BUILDERS — linux/amd64

+ const DOMAIN_ALIAS_RID_IUSERS — linux/amd64

+ const DOMAIN_ALIAS_RID_LOGGING_USERS — linux/amd64

+ const DOMAIN_ALIAS_RID_MONITORING_USERS — linux/amd64

+ const DOMAIN_ALIAS_RID_NETWORK_CONFIGURATION_OPS — linux/amd64

+ const DOMAIN_ALIAS_RID_NON_CACHEABLE_PRINCIPALS_GROUP — linux/amd64

+ const DOMAIN_ALIAS_RID_POWER_USERS — linux/amd64

+ const DOMAIN_ALIAS_RID_PREW2KCOMPACCESS — linux/amd64

+ const DOMAIN_ALIAS_RID_PRINT_OPS — linux/amd64

+ const DOMAIN_ALIAS_RID_RAS_SERVERS — linux/amd64

+ const DOMAIN_ALIAS_RID_RDS_ENDPOINT_SERVERS — linux/amd64

+ const DOMAIN_ALIAS_RID_RDS_MANAGEMENT_SERVERS — linux/amd64

+ const DOMAIN_ALIAS_RID_RDS_REMOTE_ACCESS_SERVERS — linux/amd64

+ const DOMAIN_ALIAS_RID_REMOTE_DESKTOP_USERS — linux/amd64

+ const DOMAIN_ALIAS_RID_REMOTE_MANAGEMENT_USERS — linux/amd64

+ const DOMAIN_ALIAS_RID_REPLICATOR — linux/amd64

+ const DOMAIN_ALIAS_RID_STORAGE_REPLICA_ADMINS — linux/amd64

+ const DOMAIN_ALIAS_RID_SYSTEM_OPS — linux/amd64

+ const DOMAIN_ALIAS_RID_TS_LICENSE_SERVERS — linux/amd64

+ const DOMAIN_ALIAS_RID_USERS — linux/amd64

+ const DOMAIN_GROUP_RID_ADMINS — linux/amd64

+ const DOMAIN_GROUP_RID_CDC_RESERVED — linux/amd64

+ const DOMAIN_GROUP_RID_CERT_ADMINS — linux/amd64

+ const DOMAIN_GROUP_RID_CLONEABLE_CONTROLLERS — linux/amd64

+ const DOMAIN_GROUP_RID_COMPUTERS — linux/amd64

+ const DOMAIN_GROUP_RID_CONTROLLERS — linux/amd64

+ const DOMAIN_GROUP_RID_ENTERPRISE_ADMINS — linux/amd64

+ const DOMAIN_GROUP_RID_ENTERPRISE_KEY_ADMINS — linux/amd64

+ const DOMAIN_GROUP_RID_ENTERPRISE_READONLY_DOMAIN_CONTROLLERS — linux/amd64

+ const DOMAIN_GROUP_RID_GUESTS — linux/amd64

+ const DOMAIN_GROUP_RID_KEY_ADMINS — linux/amd64

+ const DOMAIN_GROUP_RID_POLICY_ADMINS — linux/amd64

+ const DOMAIN_GROUP_RID_PROTECTED_USERS — linux/amd64

+ const DOMAIN_GROUP_RID_READONLY_CONTROLLERS — linux/amd64

+ const DOMAIN_GROUP_RID_SCHEMA_ADMINS — linux/amd64

+ const DOMAIN_GROUP_RID_USERS — linux/amd64

+ const DOMAIN_USER_RID_ADMIN — linux/amd64

+ const DOMAIN_USER_RID_GUEST — linux/amd64

+ const FAILED_ACCESS_ACE_FLAG — linux/amd64

+ const FILE_ALL_ACCESS — linux/amd64

+ const FILE_APPEND_DATA — linux/amd64

+ const FILE_EXECUTE — linux/amd64

+ const FILE_GENERIC_EXECUTE — linux/amd64

+ const FILE_GENERIC_READ — linux/amd64

+ const FILE_GENERIC_WRITE — linux/amd64

+ const FILE_READ_ATTRIBUTES — linux/amd64

+ const FILE_READ_DATA — linux/amd64

+ const FILE_READ_EA — linux/amd64

+ const FILE_WRITE_ATTRIBUTES — linux/amd64

+ const FILE_WRITE_DATA — linux/amd64

+ const FILE_WRITE_EA — linux/amd64

+ const GENERIC_ALL — linux/amd64

+ const GENERIC_EXECUTE — linux/amd64

+ const GENERIC_READ — linux/amd64

+ const GENERIC_WRITE — linux/amd64

+ const GROUP_SECURITY_INFORMATION — linux/amd64

+ const INHERITED_ACE — linux/amd64

+ const INHERIT_ONLY_ACE — linux/amd64

+ const KEY_ALL_ACCESS — linux/amd64

+ const KEY_CREATE_LINK — linux/amd64

+ const KEY_CREATE_SUB_KEY — linux/amd64

+ const KEY_ENUMERATE_SUB_KEYS — linux/amd64

+ const KEY_EXECUTE — linux/amd64

+ const KEY_NOTIFY — linux/amd64

+ const KEY_QUERY_VALUE — linux/amd64

+ const KEY_READ — linux/amd64

+ const KEY_SET_VALUE — linux/amd64

+ const KEY_WOW64_32KEY — linux/amd64

+ const KEY_WOW64_64KEY — linux/amd64

+ const KEY_WOW64_RES — linux/amd64

+ const KEY_WRITE — linux/amd64

+ const LABEL_SECURITY_INFORMATION — linux/amd64

+ const NO_PROPAGATE_INHERIT_ACE — linux/amd64

+ const OBJECT_INHERIT_ACE — linux/amd64

+ const OWNER_SECURITY_INFORMATION — linux/amd64

+ const PROTECTED_DACL_SECURITY_INFORMATION — linux/amd64

+ const PROTECTED_SACL_SECURITY_INFORMATION — linux/amd64

+ const READ_CONTROL — linux/amd64

+ const SACL_SECURITY_INFORMATION — linux/amd64

+ const SCOPE_SECURITY_INFORMATION — linux/amd64

+ const SDDL_REVISION — linux/amd64

+ const SECURITY_ANONYMOUS_LOGON_RID — linux/amd64

+ const SECURITY_APP_PACKAGE_BASE_RID — linux/amd64

+ const SECURITY_AUTHENTICATED_USER_RID — linux/amd64

+ const SECURITY_AUTHENTICATION_AUTHORITY_ASSERTED_RID — linux/amd64

+ const SECURITY_AUTHENTICATION_FRESH_KEY_AUTH_RID — linux/amd64

+ const SECURITY_AUTHENTICATION_KEY_PROPERTY_ATTESTATION_RID — linux/amd64

+ const SECURITY_AUTHENTICATION_KEY_PROPERTY_MFA_RID — linux/amd64

+ const SECURITY_AUTHENTICATION_KEY_TRUST_RID — linux/amd64

+ const SECURITY_AUTHENTICATION_SERVICE_ASSERTED_RID — linux/amd64

+ const SECURITY_BATCH_RID — linux/amd64

+ const SECURITY_BUILTIN_DOMAIN_RID — linux/amd64

+ const SECURITY_BUILTIN_PACKAGE_ANY_PACKAGE — linux/amd64

+ const SECURITY_CREATOR_GROUP_RID — linux/amd64

+ const SECURITY_CREATOR_GROUP_SERVER_RID — linux/amd64

+ const SECURITY_CREATOR_OWNER_RID — linux/amd64

+ const SECURITY_CREATOR_OWNER_RIGHTS_RID — linux/amd64

+ const SECURITY_CREATOR_OWNER_SERVER_RID — linux/amd64

+ const SECURITY_DIALUP_RID — linux/amd64

+ const SECURITY_ENTERPRISE_CONTROLLERS_RID — linux/amd64

+ const SECURITY_INTERACTIVE_RID — linux/amd64

+ const SECURITY_LOCAL_RID — linux/amd64

+ const SECURITY_LOCAL_SERVICE_RID — linux/amd64

+ const SECURITY_LOCAL_SYSTEM_RID — linux/amd64

+ const SECURITY_LOGON_IDS_RID — linux/amd64

+ const SECURITY_LOGON_IDS_RID_COUNT — linux/amd64

+ const SECURITY_MANDATORY_HIGH_RID — linux/amd64

+ const SECURITY_MANDATORY_LOW_RID — linux/amd64

+ const SECURITY_MANDATORY_MEDIUM_PLUS_RID — linux/amd64

+ const SECURITY_MANDATORY_MEDIUM_RID — linux/amd64

+ const SECURITY_MANDATORY_SYSTEM_RID — linux/amd64

+ const SECURITY_NETWORK_RID — linux/amd64

+ const SECURITY_NETWORK_SERVICE_RID — linux/amd64

+ const SECURITY_NT_NON_UNIQUE_RID — linux/amd64

+ const SECURITY_NULL_RID — linux/amd64

+ const SECURITY_PRINCIPAL_SELF_RID — linux/amd64

+ const SECURITY_PROXY_RID — linux/amd64

+ const SECURITY_RESTRICTED_CODE_RID — linux/amd64

+ const SECURITY_SERVER_LOGON_RID — linux/amd64

+ const SECURITY_SERVICE_RID — linux/amd64

+ const SECURITY_WORLD_RID — linux/amd64

+ const SECURITY_WRITE_RESTRICTED_CODE_RID — linux/amd64

+ const SE_DACL_AUTO_INHERITED — linux/amd64

+ const SE_DACL_AUTO_INHERIT_REQ — linux/amd64

+ const SE_DACL_DEFAULTED — linux/amd64

+ const SE_DACL_PRESENT — linux/amd64

+ const SE_DACL_PROTECTED — linux/amd64

+ const SE_GROUP_DEFAULTED — linux/amd64

+ const SE_OWNER_DEFAULTED — linux/amd64

+ const SE_RM_CONTROL_VALID — linux/amd64

+ const SE_SACL_AUTO_INHERITED — linux/amd64

+ const SE_SACL_AUTO_INHERIT_REQ — linux/amd64

+ const SE_SACL_DEFAULTED — linux/amd64

+ const SE_SACL_PRESENT — linux/amd64

+ const SE_SACL_PROTECTED — linux/amd64

+ const SE_SELF_RELATIVE — linux/amd64

+ const SID_MAX_SUB_AUTHORITIES — linux/amd64

+ const SID_REVISION — linux/amd64

+ const SPECIFIC_RIGHTS_ALL — linux/amd64

+ const STANDARD_RIGHTS_ALL — linux/amd64

+ const STANDARD_RIGHTS_EXECUTE — linux/amd64

+ const STANDARD_RIGHTS_READ — linux/amd64

+ const STANDARD_RIGHTS_REQUIRED — linux/amd64

+ const STANDARD_RIGHTS_WRITE — linux/amd64

+ const SUCCESSFUL_ACCESS_ACE_FLAG — linux/amd64

+ const SYNCHRONIZE — linux/amd64

+ const SYSTEM_ACCESS_FILTER_ACE_TYPE — linux/amd64

+ const SYSTEM_ALARM_ACE_TYPE — linux/amd64

+ const SYSTEM_ALARM_CALLBACK_ACE_TYPE — linux/amd64

+ const SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE — linux/amd64

+ const SYSTEM_ALARM_OBJECT_ACE_TYPE — linux/amd64

+ const SYSTEM_AUDIT_ACE_TYPE — linux/amd64

+ const SYSTEM_AUDIT_CALLBACK_ACE_TYPE — linux/amd64

+ const SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE — linux/amd64

+ const SYSTEM_AUDIT_OBJECT_ACE_TYPE — linux/amd64

+ const SYSTEM_MANDATORY_LABEL_ACE_TYPE — linux/amd64

+ const SYSTEM_MANDATORY_LABEL_NO_EXECUTE_UP — linux/amd64

+ const SYSTEM_MANDATORY_LABEL_NO_READ_UP — linux/amd64

+ const SYSTEM_MANDATORY_LABEL_NO_WRITE_UP — linux/amd64

+ const SYSTEM_PROCESS_TRUST_LABEL_ACE_TYPE — linux/amd64

+ const SYSTEM_RESOURCE_ATTRIBUTE_ACE_TYPE — linux/amd64

+ const SYSTEM_SCOPED_POLICY_ID_ACE_TYPE — linux/amd64

+ const TRUST_PROTECTED_FILTER_ACE_FLAG — linux/amd64

+ const UNPROTECTED_DACL_SECURITY_INFORMATION — linux/amd64

+ const UNPROTECTED_SACL_SECURITY_INFORMATION — linux/amd64

+ const VALID_INHERIT_FLAGS — linux/amd64

+ const WRITE_DAC — linux/amd64

+ const WRITE_OWNER — linux/amd64

+ var SECURITY_APP_PACKAGE_AUTHORITY = [6]byte — linux/amd64

+ var SECURITY_AUTHENTICATION_AUTHORITY = [6]byte — linux/amd64

+ var SECURITY_CREATOR_SID_AUTHORITY = [6]byte — linux/amd64

+ var SECURITY_LOCAL_SID_AUTHORITY = [6]byte — linux/amd64

+ var SECURITY_MANDATORY_LABEL_AUTHORITY = [6]byte — linux/amd64

+ var SECURITY_NON_UNIQUE_AUTHORITY = [6]byte — linux/amd64

+ var SECURITY_NT_AUTHORITY = [6]byte — linux/amd64

+ var SECURITY_NULL_SID_AUTHORITY = [6]byte — linux/amd64

+ var SECURITY_SCOPED_POLICY_ID_AUTHORITY = [6]byte — linux/amd64

+ var SECURITY_WORLD_SID_AUTHORITY = [6]byte — linux/amd64

+ func CanonicalizeSid(sidString string) (string, error) — linux/amd64

+ func QuerySecurityObject(path string, flags SECURITY_INFORMATION) ([]byte, error) — linux/amd64

+ func SecurityDescriptorFromString(sddlString string) ([]byte, error) — linux/amd64

+ func SecurityDescriptorToString(sd []byte) (string, error) — linux/amd64

+ func SetControl(sd []byte, controlBitsOfInterest, controlBitsToSet SECURITY_DESCRIPTOR_CONTROL) error — linux/amd64

+ func SetSecurityObject(path string, flags SECURITY_INFORMATION, sd []byte) error — linux/amd64

+ type ACCESS_ALLOWED_ACE struct — linux/amd64

+ AccessMask DWORD

+ Header ACE_HEADER

+ Sid SID

+ type ACE_HEADER struct — linux/amd64

+ AceFlags BYTE

+ AceSize WORD

+ AceType BYTE

+ type ACL struct — linux/amd64

+ AceCount WORD

+ AclRevision BYTE

+ AclSize WORD

+ Sbz1 BYTE

+ Sbz2 WORD

+ type AnySID struct — linux/amd64

+ IdentifierAuthority [6]byte

+ Revision byte

+ SubAuthority []uint32

+ SubAuthorityCount byte

+ type BYTE byte — linux/amd64

+ type DWORD uint32 — linux/amd64

+ type SECURITY_DESCRIPTOR_CONTROL WORD — linux/amd64

+ func GetControl(sd []byte) (SECURITY_DESCRIPTOR_CONTROL, error)

+ type SECURITY_DESCRIPTOR_RELATIVE struct — linux/amd64

+ Control SECURITY_DESCRIPTOR_CONTROL

+ Data [0]BYTE

+ OffsetDacl DWORD

+ OffsetGroup DWORD

+ OffsetOwner DWORD

+ OffsetSacl DWORD

+ Revision BYTE

+ Sbz1 BYTE

+ type SECURITY_INFORMATION uint32 — linux/amd64

+ type SID struct — linux/amd64

+ IdentifierAuthority [6]BYTE

+ Revision BYTE

+ SubAuthority [1]DWORD

+ SubAuthorityCount BYTE

+ type WORD uint16 — linux/amd64

v10.16.2

Nov 7, 2022

v10.16.1

Oct 5, 2022

v10.16.0

Jul 21, 2022

v10.15.0

May 10, 2022

v10.14.1

Mar 14, 2022

v10.14.0

Feb 25, 2022

Changes in this version

type SDDLString

+ func (s SDDLString) Compare(other SDDLString) bool

v10.13.0

Oct 20, 2021

v10.12.2

Sep 20, 2021

v10.12.1

Sep 1, 2021

v10.12.0

Aug 31, 2021

v10.11.0

Jun 15, 2021

v10.10.0

Apr 14, 2021

Changes in this version

+ var LiteralSIDRegex = regexp.MustCompile(`SID\(.*?\)`)

+ var StringRegex = regexp.MustCompile(`("")|(".*?[^\\]")`)

+ func IffInt(condition bool, tVal, fVal int) int

+ func OSTranslateSID(SID string) (string, error)

+ type ACLEntry struct

+ Sections []string

+ type ACLList struct

+ ACLEntries []ACLEntry

+ Flags string

+ func (a *ACLList) PortableString() string

+ func (a *ACLList) String() string

+ type SDDLString struct

+ DACL ACLList

+ GroupSID string

+ OwnerSID string

+ SACL ACLList

+ func ParseSDDL(input string) (sddl SDDLString, err error)

+ func (s *SDDLString) PortableString() string

+ func (s *SDDLString) String() string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL