From 3c21d8c59c9ca2a6e0f921ccfcf295e6cabe03b3 Mon Sep 17 00:00:00 2001
From: Clement Rouault <project@hakril.net>
Date: Wed, 24 May 2017 17:43:34 +0200
Subject: [PATCH] token.integrity is now settable

---
 windows/winobject/process.py | 27 ++++++++++++++++++++++++---
 1 file changed, 24 insertions(+), 3 deletions(-)

diff --git a/windows/winobject/process.py b/windows/winobject/process.py
index 0e9c0c3..3d457c7 100644
--- a/windows/winobject/process.py
+++ b/windows/winobject/process.py
@@ -23,6 +23,7 @@ from windows.generated_def.ntstatus import NtStatusException
 from windows.generated_def import windef
 
 from windows.winobject import exception
+from windows.winobject import sid
 
 
 TimeInfo = namedtuple("TimeInfo", ["creation", "exit", "kernel", "user"])
@@ -677,7 +678,7 @@ class Process(AutoHandle):
         return Token(token_handle.value)
 
 
-    token =  property(open_token)
+    token = property(open_token)
 
     # @utils.fixedpropety
     # def token(self):
@@ -846,6 +847,15 @@ class CurrentProcess(Process):
             raise ValueError("Not a syswow process")
         return windows.syswow64.get_current_process_syswow_peb()
 
+
+    def open_token(self, flags=TOKEN_ALL_ACCESS):
+        token_handle = HANDLE()
+        winproxy.OpenProcessToken(self.handle, flags, byref(token_handle))
+        return Token(token_handle.value)
+
+
+    token = property(open_token)
+
 class WinProcess(Process):
     """A Process on the system"""
     def __init__(self, pid=None, handle=None, name=None, ppid=None):
@@ -1101,8 +1111,7 @@ class Token(AutoHandle):
     def __init__(self, handle):
         self._handle = handle
 
-    @property
-    def integrity(self):
+    def get_integrity(self):
         """Return the integrity level of a token
 
         :type: :class:`int`
@@ -1115,6 +1124,18 @@ class Token(AutoHandle):
         integrity = winproxy.GetSidSubAuthority(sid, count[0] - 1)[0]
         return know_integrity_level_mapper.get(integrity, integrity)
 
+    def set_integrity(self, integrity):
+        """Set the integrity level of a token
+
+        :param type: :class:`int`
+		"""
+        mandatory_label = TOKEN_MANDATORY_LABEL()
+        mandatory_label.Label.Attributes = 0x60
+        mandatory_label.Label.Sid = sid.EPSID.from_string("S-1-16-{0}".format(integrity))
+        self.set_informations(TokenIntegrityLevel, mandatory_label)
+
+    integrity = property(get_integrity, set_integrity)
+
     @property
     def is_elevated(self):
         """``True`` if process is Admin"""