Friday, October 22, 2010

Working MobileTerminal for iOS 4.1

Unfortunately still there's no working MobileTerminal app in the Cydia repository, but can be found in other sources. Give http://www.podzombie.com/repository/ to your repository sources and install the one and only MobileTerminal package from it.

Tuesday, November 25, 2008

Programming, RunAsAdminExplorer Shim v2.0.0.Beta10

At last here are the new beta version.

Enjoy!

IMPORTANT!!! This release has a new installer which currently unable to detect and cleanup installations of RAA prior to Beta8!
Please REMOVE any previous version of the software prior to Beta8!

IMPORTANT release notes!
Vista users! Sorry but could not find during earlier testing that the current version of RAA still not fully supports Windows Vista. On that OS ShellExecuteHooks not supported anymore, so the policy could not be applied automatically on files started from the shell via ShellExecute(Ex) :( We have to find another method to get notified about a file startup from the shell.

Sorry but the new beta still has not been fully translated to all the supported languages, except Hungarian.

*** We are still looking for translators to the languages supported earlier yet and an English corrector also! ***

Here are the summary of changes made:

    -----------------------------------------
    v 2.0.0.Beta10
    -----------------------------------------

    Global changes
    - The unrestricted level startup and policy modification confirmation now simulates the windows shutdown confirmation dialog and opened on a separate, secured desktop!
    - At last directories and shell namespace objects can be selected to open at a given restriction level.
    Not finished perfectly yet, known limitations are:
    - Objects pointing to directories now can be opened nicely (f.e. Control Panel, My Computer, etc.), but not objects like Internet, Mail, etc. because they are not yet differentiated from those mentioned first and can not be opened the way like those.
    - Directories opened in explorer view shell namespace objects in single pane view. Later this would be customizable also via the settings dialog.
    - The privilege level colors of the shell command windows now selectable.
    TODO: The color values built in hardcoded, based on the default command dialog color settings, we must read them from the registry and monitor any changes of them.
    - Lots of effort put into that all the dialogs could behave like they were modeless (even if they are modal) so the event and message handling modified hardly. Hope finally we could found a good solution to let all the actions that RAA offers always be available. If you found some trouble please sign to us at our bug report page: http://runasadmin.sourceforge.net/Bugs/
    - Corrected a lot of memory leaks. :(
    - BUG FIX: Strange command window icon and default directory behavior signed at https://sourceforge.net/forum/forum.php?thread_id=1969342&forum_id=433979 corrected.
    - Added new module RAACommon.dll to store project wide common datas, function and classes at a common place. The directory and file placement structure heavily changed.
    - Normal user tokens now contains SeSystemtimePrivilege, but you can force to remove them if you wish together with some other token elemnts via policy rule attributes, see bellow.
    - Added and started to use a more detailed logging solution. The log file can be found the place pointed by HKEY_LOCAL_MACHINE\SOFTWARE\RunAsAdmin\LogFile. The logging level value can be set via HKEY_LOCAL_MACHINE\SOFTWARE\RunAsAdmin\LoggingLevel registry value. The lower the value the more detailed log produced.
    - Added limited support of multiple desktops.
    Known limitations are:
    - RAA tray icon, command, settings and about dialogs are showing only on the primary desktop (WinSta0\Default).
    - Like tray icon the RunAsAdminHook also not installed on another desktops so privilege caption information not shown on the other desktops.
    - Activating the dialogs mentioned above switching automatically to the primary desktop.

    In Explorer.exe
    - The unrestricted level startup and policy modification confirmation now simulates the windows shutdown confirmation dialog and opened on a separate, secured desktop!
    - Added implementation of new option 'Startup level override policy' to let confirm startups that override the security level defined in the policy.
    - Strings in the confirmation dialogs of modification request of level and priority policy now corrected.
    - As a new registered shell RAA do not get set some shell variables f.e. %HOMEDRIVE% and %HOMEPATH%. Splitting up %USERPROFILE% which set correctly at startup to build up the 2 missing.
    - Using now %HOMEDRIVE%%HOMEPATH% as the startup directory of the newly created processes where the directory itself not specified in the file path to execute, otherwise using the path of the file.
    - BUG fixed: TaskmanImageHijack occurred at every startup even if that option was turned off.
    - Added implementation of 'Check For Update' functionality. Now available from the About box as a button and as an automat called periodically and/or at startup as defined in settings. Checks for the repository for explorer.rh at the TheLatestRelease tag directory, parses it's content and compares the version of explorer.exe. If the local version is smaller than signals it, the default project download page can be opened via an url link.
    - Program exit now confirmed (and has a hotkey at debug time, CTRL+SHIFT+ALT+X)

    In RAAShellContextMenu
    - Removed local safer level token creation (CreateTokenForSaferLevel). Now using simple signal sending to explorer.exe at every requested level.
    - Path copy now can be used if multiple items selected, the paths copied to the clipboard with a new line separator between each other.
    - The 'Run with priority' context menu item is removed till we implement it on a way that starts the file with policy level check also.

    In RAACommCtrls
    - Added new option 'Startup level override policy' to let confirm startups that override the security level defined in the policy.
    - Policy changes that has effect on priority settings now reflected immediately in opened setup dialogs. Please remember priority-realtime-allow has priority above priority-high-restrict in policy!
    - The privilege level colors of the shell command windows now selectable
    TODO: The color values built in hardcoded, based on the default command dialog color settings, we must read them from the registry and monitor any changes of them.

    In Policy
    - RAA Policy now supports attributes for normal user token creation. You can create the normal user token as an even more restricted one, just set those properties (See in the new Policy.xml) to TRUE (1) to remove the corresponding token elements from the final produced normal user token. You must restart RAA to these changes take affect!
    - Adding a hash based rule from RunAsAdmin now adds a comment also to the policy before the rule, containing the subject readable name to aid identifying the subject of the rule.
    - Policy evaluation now happens in reverse order (from most restricted to least restricted level), so if a subject has multiple rules defined at different levels the most restricted level will be used.
    - Added an xslt policy file (%SYSTEMROOT%\Shim\Policy\Policy.xslt) to support a formatted xml output at policy file writting, but the current file still not works too well :( (therefore not used in the release version). If anyone could give us a working xslt file that can produce a well formatted (tabulated, properly line ended and keeps comment lines also) xml output will'be so glad :D

Wednesday, February 13, 2008

Programming, RunAsAdminExplorer Shim v2.0.0.Beta9.Fix_1

We had to release a quick fix for bug #1892584 in Beta9.
You can download it from here.
You can find the installation instruction in the Readme.txt inside the archive.

Sorry for the inconvenience!

Tuesday, February 12, 2008

Programming, RunAsAdminExplorer Shim v2.0.0.Beta9

We are happy to announce the new beta which contains a lot of new features and bug fixes, please see detailed list below.

IMPORTANT!!! This release has a new installer which currently unable to detect and cleanup installations of RAA prior to Beta8!
Please REMOVE any previous version of the software prior to Beta8!
Sorry but the new beta still has not been fully translated to all the supported languages, except Hungarian, Catalan and Spanish.

*** We are looking for translators to the languages supported earlier yet and an English corrector also! ***

Enjoy!

    Here are the summary of changes made:

    -----------------------------------------
    v 2.0.0.Beta9
    -----------------------------------------
    Global changes
    - Added FileHash.vbs to Samples and RunAsAdminPolicy.pdf to Doc installation directories. Usage of FileHash.vbs: cscript newhash.vbs "file1ToBeHashed" "file2ToBeHashed" "fileNToBeHashed"
    - Added Turkish translation of setup, thanks to Muhammat! To compile innosetup you need Turkish translation file that you can get from here http://www.jrsoftware.org/files/istrans/
    - Added support of w2k sp4.
    Known limitations are on that OS:
    - Currently only Normal and Unrestricted levels supported.

    In Explorer.exe
    - Command dialog is now runs modeless totally.
    Note: Earlier modal behavior caused the following problems:
    - A stop dialog at runtime to close the open command dialog(s) before exit
    - Running a file from the context menu was delayed until the command dialog(s) not closed.
    - Drag and drop onto our tray icon blocked until the command dialog(s) not closed.
    If you still find problem like mentioned above please sign us.
    Attention! Although these limitations are eliminated by the new modless dialog but when you drop a file onto the tray icon and choosed the command dialog be opened in that case and also you have opened command dialog at that time, than the file will be appended to the 'Run' line of the dialog.
    - Drag and Drop feature on our tray icon and command dialog is enhanced. Also added balloon tooltip when D&D started or when has other tipp about the D&D process (currently when any of the run command dialogs are open). You can disable this balloon tooltip window at 'Options\Drag options\Show balloon tooltips'.
    - BUG FIX: #1686842 fixed, Tasks run as normal user now have shutdown and undock privileges in their token. The new self made token now works (at least we hope it;) on every supported OSes. Also that token made possible to support w2k also.
    - FEATURE REQUEST IMPLEMENTED: #139070, the task manager will start by the configured hotkey at a restriction level depending on policy setting.
    - Similar to the solution of task #127552, the file have to be run from our command dialog now also can be start with options 'Always run as' ands/or 'Always run with priority'. Note: Currently 'Always run with priority' is enabled only if the targeted file is an executable (.com;.exe)!
    - BUG FIX: #1758345 fixed, RAA was unable to start windows shell as normal user if local policy have been set 'System objects: Default owner for objects created by members of the Administrators group' to 'Administrators group'. The normal user token now has a deafult DACL contains full rights for Admins, System and the Logon ID Sid.
    - BUG FIX: #1599717 fixed.
    - BUG FIX: #1415310 fixed, RAA now updates it's environment variables from the actual user and system environment variables in case of runtime changes occurred.
    - Added built in confirmation option of unrestricted file start and/or RAA's policy modification. The implementation of the confirmation dialog is not perfect yet. TODO: The confirmation dialog can be closed by any window that become active. This must be corrected, only SHIFT+CTRL+ESC (task manager), CTRL+ALT+DEL (login window or task manager) or CTRL+ESC (start menu) should close our dialog.

    In RAAShellContextMenu
    - TASK FINISHED: #131949. You can add rule to RAA Policy for a given file based on it's path or hash to get the file always be started at a given startup restriction level. Simply use any of the 'Always run as' menu items from the context menu.
    - TASK FINISHED: #127552. Added implementation of priority policy. You can control startup priority of a given file just like for startup level, simply use any of the 'Always run with priority' menu items from the context menu. Note: Currently only executable files (.com;.exe) can be added to the policy as 'Always run with priority' rule this way!
    - Added new option to let paths to be copied automatically surrounded by double quotes. You can select the behavior this way of the CTRL key held down during the copy.
    - BUG 1491386 fixed: The 'New Folder' button now works fine in the Save (as) dialogs.

    In RAACommCtrls
    - FEATURE REQUEST IMPLEMENTED: #139070, the task manager will start by the configured hotkey at a restriction level depending on policy setting.
    - TASK FINISHED: #139069. The taskmanager started by winlogon under NT AUTHORITY\SYSTEM acc now disabled if required.
    - TASK FINISHED: #139068. The two old property priority-realtime-allow and priority-high-restrict finally not removed from the policy, they have global restriction meaning from now. The policy settings has priority over the user settings therefore if the policy restricts the priority level the user settings can add a more restrictive rule only. The state of the controls representing the user settings of the two startup priority restriction level now set also corresponding to the restriction level set in the policy. It means they can appear in disabled state or can be hidden depending on the global restriction level of the policy and depending on the state of the user settings. f.e. If the policy has priority-realtime-allow="0" priority-high-restrict="0" level setting then the user can only set the 'Priority high restricted' option and would not see the realtime priority level in the context menu or the command dialog of RAA. As earlier priority-realtime-allow="1" priority-high-restrict="1" means no restriction on level 'high', priority-realtime-allow has priority over priority-high-restrict if enabled, this is true in the options dialog also, which also signed by the state of the corresponding controls.
    - TASK FINISHED: #139097. Load and Save settings functions now handles admin options separately reads and stores admin settings under HKLM\SOFTWARE\RunAsAdmin\AdminSettings\%COMPUTERDOMAIN%\%USERNAME%. User settings stored at HKCU\SOFTWARE\RunAsAdmin\UserSettings. Any admin option presented will overwrites the usersettings at Load time and will be saved separately under the HKLM key at Save time. Via this new feature finally we can perfectly control access of admin options of RAA and protect settings of file startup with unrestricted level. The new sample at https://sourceforge.net/forum/forum.php?thread_id=1734421&forum_id=543633 shows you how to enable access of admin options and 'Run As Unrestricted' possibilities from menus and dialogs for specified users only.
    - TASK IMPLEMENTED: #127557 80% ready, Now you can choose privilege info to be shown in shell windows also. Actually you can select text to be shown just like for normal windows earlier (the same controls used for that) and can select if you'd like to change the colors of the shell window with admin privilege. The text would be ADMIN and NONADMIN (for the English version, your translator can change it). The colors itself now could not be customized from the program, turned this option on the admin shell background color changes to Bright White and the text color to Light Red. The non admin shell keeps the default color settings. If you'd like to change colors to a custom value please see: http://tinyurl.com/398hw5. RAA implements this feature very similar, just check the HKCU\SOFTWARE\Microsoft\Command Processor\AutoRun Value and the help of the 'color' command. Our shell command privilege info not set directly in the autoruns reg key, but using now 2 separated command files AutoRuns.cmd and RAAAutoRuns.cmd. They are stored at %APPDATA%\RunAsAdmin\Command Processor\. The first one is specified in autoruns and calls the other. Also merged into the first file at creation the previously defined autoruns if any. This way the user can henceforward customise autoruns and also RAA can call the required commands to support privilege caption info (till the user do not remove our reference from the first file) Enabling controls of the shell privilege info setting enhanced. Now you can not deselect 'Show text' if 'Show in shell window also' selected and 'Change shell window color' not selected, because that setting would not have affect on the shell window (neither caption nor color would have been changed). Also if both 'Show text', 'Show in shell window also' and 'Change shell window color' were deselected turning on 'Show in shell window also' will turn on 'Change shell window color' automatically.Currently only the built in windows shell modified, to get the modified a custom shell f.e. PowerShell please see http://tinyurl.com/2yzg23. Thanks for Aaron Margosis and other contributors write on his blog page for the FSUTIL trick.
    - Added new option to let paths to be copied automatically surrounded by double quotes. You can select the behavior this way of the CTRL key held down during the copy.
    - Added new option to let the user control which privileged action be confirmed. (Unrestricted file run, RAA's policy modification...)

    In Policy
    - Added handling of the new policy attribute allow-priority-override, which is by defult enabled. If allow-priority-override false then the priority policy checking functions does not let it's allowed priority return value to be set higher than defined by the priority-realtime-allow and priority-high-restrict attributes even if the examined subject has a priority rule with higher value allowed.
    - TASK FINISHED: #127552. Added implementation of priority policy. You can control startup priority just like startup level, just use 'priorities' element like 'levels' f.e.

    <priorities> 
    <belownormal> 
    <record groupName="AlwaysBelowNormalPriority"/> 
    </belownormal> 
    </priorities> 

    Note: If allow-priority-override is "0" in RAA's policy the 'priorities' elements still could not override the global priority-realtime-allow and priority-high-restrict level settings of policy. Any higher value than the allowed by priority-realtime-allow and priority-high-restrict fall back to that allowed maximum level.
    Note: The current implementation of this feature might cause a bit overall system performance overhead (because of periodical registry and file system reading) due to our policy not yet cached!
    You can turn off this feature at "Options\Performance options\Adjust all listed in policy"
    - Added two new signal element 'always-priority-rule' and 'always-level-rule' to handle the two corresponding policy modification requests.

Thursday, May 03, 2007

Programming, RunAsAdminExplorer Shim v2.0.0.Beta8

Finally we release the new beta which mainly contains bug fixes, but has some new features also please see detailed list below.

IMPORTANT!!! This release has a new installer which currently unable to detect previous installations of RAA! Please REMOVE any previous version of the software prior to install the new Beta8!

    Changes in v 2.0.0.Beta8

    Global changes
    - TASK FINISHED: #127580, solution and projects moved to MS Visual Studio 2005
    - Setup changed to Inno Setup. http://www.jrsoftware.org/isinfo.php You can use Quick Start Pack from http://www.jrsoftware.org/isdl.php#qsp The Inno Setup QuickStart Pack includes additional third-party add-ons such as the ISTool script editor and Inno Setup Preprocessor.
    - FEATURE REQUEST IMPLEMENTED: #1588941, RAA can be setup and run under Vista now.
    Current known limitations under vista are :
    - Privilege caption info not supported yet.
    - Beta 8 introduce a fix for 'Could not shutdown from the shell' problem. That fix is not working on Vista, so we have to use currently the original win API SaferCreateLevel to produce the normal user token, which has no shutdown privilege, so under vista you still have to use a shutdown tool.

    In Explorer.exe
    - Added support of recreation of tray status bar icon if the windows shell has been restarted.
    - Added handling of unnecessary single click events in case of a double click on our tray icon
    - BUG FIX: Do not know why but STATIC::WM_RUNASADMIM_MENU triggered in case of click events on the status area not owned by any tray icons?!!?!?!? (that causing RAA menus appear clicking on not owned tray icon area). Temporaly fix can be removed if found the reason.
    - BUG FIX: Main (CExplorerModule) message loop now handles modeless COptionsDialog and CAboutDialog acceleration messages.
    - BUG FIX: #1544086 fixed, CommandLineToArgvW has a special interpretation of backslash characters when they are followed by a quotation mark character (")
    - BUG FIX: #1500208 fixed, frequent calls of LoadImage without using LR_SHARED flag in ChangeTrayIcon eat GDI resources, later we can make a TTrayIcon class that would keep tracked the loaded resources.
    - Added silent (un)install option "-S"
    - BUG FIX: #1686842 fixed, Tasks run as normal user now have shutdown and undock privileges in their token.
    - BUG FIX: Options possibly changed at startup now saved correctly at RAA taskbar window creation.
    - Added new option WarnOptions::WarnOnUnsufficientPrivilege. If set RAA warns the user at startup about possibly insufficient privileges he/she owns and asks for if the warning must be shown at next time also. Stores the result of the answer as the newly added options. If the user has no enough privilege (using RAA without admin privilege) our new ComputeNormalTokenFromCurrent func might fail. In that case we are using the original SaferCreateLevel function to create the normal user token.
    - Added GetFullPathName bug workaround, the virtual folder path names produced by the function call, like ::\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{21EC2020-3AEA-1069-A2DD-08002B30309D}\::{E211B736-43FD-11D1-9EFB-0000F8757FCD} of 'Scanners and cameras' are could not be opened by the shell, the first '\' at the beginning of the directory name part is brakes the shellparser :-O

    In RunAsAdminHook
    - BUG FIX: Fixed annoying tray icon drag&drop bug mouse release events inside the TrayNotifyWindow did not triggered WM_MOUSELEAVE that is used to handle the end of a d&d operation in RAA explorer.
    - BUG FIX: In LowLevelMouseProc detection of WM_MOUSEMOVE, WM_MOUSELEAVE has run only when NoClickOnDragOverShowHide was not set. :$
    - TASK IMPLEMENTED: #137520 50% ready, offsets of privilege caption info can now be set in RAA OptionDlg.

    In Policy.exe
    - TASK FINISHED: #132820 implemented, Policy check scripts now can examine the parameters passed with the file to be started. Command parameters could be accessed from the policy script by using "context" named variable. Context is an array where the first element of the array (index 0) contain array of parameters, and the second element of the array contains XML node of the policy that fired the rule. NOTE: in some cases the first element of context will be VT_EMPTY.

    In Launcher.exe
    - BUG FIX: ParseCommandLine handled incorrectly the case when only 4 command line params were given with /p

    In RAACommCtrls
    - BUG FIX: When restoring dialog control states from the saved options IDC_SHOW_HIDDEN_TASKBAR_ICONS and IDC_SHOW_CMDDLG_ON_CTRLDOWN were exchanged :$
    - TASK IMPLEMENTED: #137520 50% ready, offsets of privilege caption info can now be set in RAA OptionDlg.
    - Added new option WarnOptions::WarnOnUnsufficientPrivilege in RAA OptionDlg.

    In RAAShellContextMenu
    - Added possibility of unix style, slash separated path copy to the 'Copy path to clipboard' context menu. If Shift held down the path copied in unix style. Of course you can combine the Ctrl and Shift keys to get the path in unix style and quoted at once.
    - BUG FIX: #1686842 fixed, Tasks started as normal user now have shutdown and undock privileges in their token.

    In ExecuteHook
    - Added handling of filenames without path and extension. We try to find runable files in the PATH with the given extension or extensions determined by PATHEXT and transform the unqualified filename to its fully qualified peer. Without that f.e. simple commands run from Win+R shell run dialog were not effected by the Policy.
    - Project node renamed to RAAExecuteHook

Monday, May 22, 2006

Programming, RunAsAdminExplorer Shim v2.0.0.Beta7

Bugfixes and some new interesting feature. Enjoy!

    v 2.0.0.Beta7
    In RAACommCtrl
    - BUG FIX: #1455711 temporaly fix: Dialog items reordered and replaced to fit into a 800x600 box. TODO: we have to make the dialog tabbed.
    - BUG FIX: #1455948 fixed, added new option PerfomanceOptions::AllowPriorityAdjust via RAA could maintain priority of itself and Windows Explorer.
    - BUG FIX: #1475406 fixed, added new option PerformanceOptions::AllExplorerInstances to allow automatic priority adjust of every running Windows Explorer instances.
    - BUG FIX: Fixed bug and prevent OptionDialog to modify other user's settings. If OptionDialog called from (e.g. ShellExt of) impersonated processes the caller should not have to allow OptionDialog to be used (like RAAShellContextMenu does now)
    - Added modeless dialog implementation of About and Option dialog. It eliminates the problem of modal dialogs does not handle RAA global events, therefore a lot of functions failed while modalboxes run.
    - About dialog now has active url links.

    In Explorer.exe
    - BUG FIX: #1455948 fixed, added nem option to let RAA adjust task priorities and RAA and Windows Explorer priority adjusted according to the selected option, also added code to always adjust the priority in idle time if changed.
    - Changed LoadIcon calls to LoadImage to load the correct size icons.
    - Detection if explorer.exe started enhanced in IsExplorerAvailable(), pre test-creation of the tray icon added
    - BUG FIX: #1447062 fixed, First instance now set the instance guard event security DACL to let access and some control of the instance event from another process, even in a terminal server environment.
    - BUG FIX: Fixed bug and prevent OptionDialog to modify other user's settings. If OptionDialog called from (e.g. ShellExt of) impersonated processes the caller should not have to allow OptionDialog to be used (like RAAShellContextMenu does now)
    - BUG FIX: #1475406 fixed, added new option PerformanceOptions::AllExplorerInstances to allow automatic priority adjust of every running Windows Explorer instances.
    - Still did not used the correct icon sizes for the big icon. :$
    - Added modeless dialog implementation of About and Option dialog. It eliminates the problem of modal dialogs does not handle RAA global events, therefore a lot of functions failed while modalboxes run.
    TODO: we still have one modal dialog Command Dialog!!! We have to replace it with a modeless version!!!
    - Removed some temporaly limitations after the modeless correction made.

    In RAAShellContextMenu
    - BUG FIX #1447065 fixed, Changed LoadIcon calls to LoadImage to load the correct size icons.

    In RunAsAdminHook
    - BUG FIX: - Using a new hook and message (WM_RAA_PRIVINFO_DRAW) to repaint our priv caption, not drawing directly in CallWndRetProc to let some time windows to process the paint of the original window caption first. It fix the bug that could be detected f.e. in windows explorer when just simply selected a different folder in the browser tree and priv caption has not been repainted.

Wednesday, March 08, 2006

Programming, RunAsAdminExplorer Shim

The project source has been moved to SVN, thanks to the SFNet team for the huge work they made on SVN support!!!
You can find the source at https://svn.sourceforge.net/svnroot/runasadmin in the feature. The lates beta6 branch is here https://svn.sourceforge.net/svnroot/runasadmin/branches/Beta6

CVS access now is read only and will be turned off completely in a few weeks.