CreateProcessAsUser を用いて Go で作成したサービスからリンクドトークンでプロセスを起動する

blono/win にまたいくつかの API を追加したので、サービスからのプロセスの起動がコーディングしやすくなった

main.go

func GetActiveSession() uint32 {
	var si *win.WTS_SESSION_INFO
	var count uint32

	if win.WTSEnumerateSessions(win.WTS_CURRENT_SERVER_HANDLE, 0, 1, &si, &count) != 0 {
		defer win.WTSFreeMemory(uintptr(unsafe.Pointer(si)))

		size := int(unsafe.Sizeof(win.WTS_SESSION_INFO{}))

		for i := 0; i < int(count); i++ {
			sipi := unsafe.Pointer(uintptr(unsafe.Pointer(si)) + uintptr(i*size))
			sii := *(*win.WTS_SESSION_INFO)(sipi)

			if sii.State == win.WTSActive {
				return sii.SessionId
			}
		}
	}

	return 0
}

func CreateProcessAsUser(app, param string, token win.HANDLE, creationFlags uint32, env uintptr, ppi *win.PROCESS_INFORMATION) win.BOOL {
	var pi win.PROCESS_INFORMATION
	var si win.STARTUPINFO
	var arg string

	si.Cb = uint32(unsafe.Sizeof(si))
	si.LpDesktop = NewUTF16(`winsta0\default`)

	if param == "" {
		arg = app
	} else {
		arg = app + " " + param
	}

	result := win.CreateProcessAsUser(token, nil, &arg, nil, nil, win.FALSE, creationFlags, env, nil, &si, &pi)
	if ppi == nil {
		win.CloseHandle(pi.HThread)
		win.CloseHandle(pi.HProcess)
	} else {
		*ppi = pi
	}

	return result
}

func CreateProcessAsActiveUser(app, param string, ppi *win.PROCESS_INFORMATION) win.BOOL {
	activeSession := GetActiveSession()
	var userToken win.HANDLE

	if win.WTSQueryUserToken(activeSession, &userToken) != 0 {
		defer win.CloseHandle(userToken)

		var linkedToken win.HANDLE
		var size uint32 = uint32(unsafe.Sizeof(linkedToken))

		if win.GetTokenInformation(userToken, win.TokenLinkedToken, uintptr(unsafe.Pointer(&linkedToken)), size, &size) != 0 {
			defer win.CloseHandle(linkedToken)

			var duplicatedToken win.HANDLE

			if win.DuplicateTokenEx(linkedToken, win.MAXIMUM_ALLOWED, nil, win.SecurityImpersonation, win.TokenPrimary, &duplicatedToken) != 0 {
				var creationFlags uint32 = win.CREATE_NEW_CONSOLE | win.NORMAL_PRIORITY_CLASS
				var env uintptr

				if win.CreateEnvironmentBlock(&env, duplicatedToken, win.TRUE) != 0 {
					creationFlags |= win.CREATE_UNICODE_ENVIRONMENT
					defer win.DestroyEnvironmentBlock(env)
				}

				return CreateProcessAsUser(app, param, duplicatedToken, creationFlags, env, ppi)
			}
		}
	}

	return win.FALSE
}

Go で Windows Service を作成する で作成した Windows サービスから呼び出すことで動作を確認可能。