Harden System Security v1.0.2.0 (#811)

Added an app alias for the Harden System Security. You can now launch it from commandline via HSS.exe.

Added a new file association for .pol files. The app will now handle files with the extension .pol and open them in the Harden System Security application's Group Policy Editor page. They will also have a beautiful icon in the file explorer. By default, .pol files don't have any icons associated with them.

When you hover over the link button for each security measure, a tiny flyout will appear that'll open the URL of the security measure in a mini browser, allowing you to quickly browse the resource and get accurate up to date information on demand. You have the option to disable this feature in the app settings.

Reduced the amount of empty spaces around each security measure item in the List Views by better utilizing the available space.

Reduced the amount of empty spaces in each page between the page header and the Guide button. (This change has been applied to the AppControl Manager as well.)

Improved some of the security measure names in the TLS category to be more descriptive and easier to understand.

Made the columns in the List View in the Group Policy Editor page resizable by offering draggable areas in the header.

Added a new setting to the app settings page that allows you to control whether the List Views that show items in groups have sticky header or the header will scroll with the rest of the items.

Fixed a visual issue with animations in some of the pages' toolbars. During back navigation (when using the back button), some of them would have half opacity.

The settings page now shows the correct app name in the About section.

Author: HotCakeX

AppControl Manager/App.xaml

@@ -103,6 +103,16 @@
                 </Setter>
             </Style>
 
+
+            <!-- The styles of the Wrap Panel which is at the top of almost every page -->
+            <Style x:Key="PageHeaderWrapPanelStyle" TargetType="controls:WrapPanel">
+                <Setter Property="Grid.Row" Value="0"/>
+                <Setter Property="VerticalSpacing" Value="4"/>
+                <Setter Property="HorizontalSpacing" Value="4"/>
+                <Setter Property="Orientation" Value="Vertical"/>
+                <Setter Property="Margin" Value="6,0,6,5"/>
+            </Style>
+
         </ResourceDictionary>
     </Application.Resources>
 </Application>

AppControl Manager/App.xaml.cs

@@ -148,12 +148,6 @@ public partial class App : Application
 	// to this variable before using ShowAsync() method to display it.
 	internal static ContentDialog? CurrentlyOpenContentDialog;
 
-	internal static NavigationService _nav => ViewModelProvider.NavigationService;
-
-#if APP_CONTROL_MANAGER
-	private static PolicyEditorVM PolicyEditorViewModel => ViewModelProvider.PolicyEditorVM;
-#endif
-
 	/// <summary>
 	/// Initializes the singleton application object. This is the first line of authored code
 	/// executed, and as such is the logical equivalent of main() or WinMain().
@@ -235,12 +229,7 @@ private async void TaskScheduler_UnobservedTaskException(object? sender, Unobser
 	/// Invoked when the application is launched.
 	/// </summary>
 	/// <param name="args">Details about the launch request and process.</param>
-#if APP_CONTROL_MANAGER
 	protected override async void OnLaunched(Microsoft.UI.Xaml.LaunchActivatedEventArgs args)
-#endif
-#if HARDEN_SYSTEM_SECURITY
-	protected override void OnLaunched(Microsoft.UI.Xaml.LaunchActivatedEventArgs args)
-#endif
 
 	{
 		// Register the Jump List tasks
@@ -467,7 +456,7 @@ protected override void OnLaunched(Microsoft.UI.Xaml.LaunchActivatedEventArgs ar
 		MainWindowVM.SetCaptionButtonsFlowDirection(string.Equals(Settings.ApplicationGlobalFlowDirection, "LeftToRight", StringComparison.OrdinalIgnoreCase) ? FlowDirection.LeftToRight : FlowDirection.RightToLeft);
 
 		NavigationService.RestoreWindowSize(m_window.AppWindow); // Restore window size on startup
-		_nav.mainWindowVM.OnIconsStylesChanged(Settings.IconsStyle); // Set the initial Icons styles based on the user's settings
+		ViewModelProvider.NavigationService.mainWindowVM.OnIconsStylesChanged(Settings.IconsStyle); // Set the initial Icons styles based on the user's settings
 		m_window.Closed += Window_Closed;  // Assign event handler for the window closed event
 		m_window.Activate();
 
@@ -478,12 +467,13 @@ protected override void OnLaunched(Microsoft.UI.Xaml.LaunchActivatedEventArgs ar
 
 		if (!string.IsNullOrWhiteSpace(Settings.FileActivatedLaunchArg))
 		{
-#if APP_CONTROL_MANAGER
+
 			Logger.Write(string.Format(GlobalVars.GetStr("FileActivationLaunchMessage"), Settings.FileActivatedLaunchArg));
 
+#if APP_CONTROL_MANAGER
 			try
 			{
-				await PolicyEditorViewModel.OpenInPolicyEditor(Settings.FileActivatedLaunchArg);
+				await ViewModelProvider.PolicyEditorVM.OpenInPolicyEditor(Settings.FileActivatedLaunchArg);
 			}
 			catch (Exception ex)
 			{
@@ -511,7 +501,7 @@ protected override void OnLaunched(Microsoft.UI.Xaml.LaunchActivatedEventArgs ar
 					{
 						case ViewModelBase.LaunchProtocolActions.PolicyEditor:
 							{
-								await PolicyEditorViewModel.OpenInPolicyEditor(Settings.LaunchActivationFilePath);
+								await ViewModelProvider.PolicyEditorVM.OpenInPolicyEditor(Settings.LaunchActivationFilePath);
 								break;
 							}
 						case ViewModelBase.LaunchProtocolActions.FileSignature:
@@ -554,6 +544,30 @@ protected override void OnLaunched(Microsoft.UI.Xaml.LaunchActivatedEventArgs ar
 				Settings.LaunchActivationAction = string.Empty;
 			}
 #endif
+
+
+#if HARDEN_SYSTEM_SECURITY
+
+			try
+			{
+				await ViewModelProvider.GroupPolicyEditorVM.OpenInGroupPolicyEditor(Settings.FileActivatedLaunchArg);
+			}
+			catch (Exception ex)
+			{
+				Logger.Write(ErrorWriter.FormatException(ex));
+
+				// Continue doing the normal navigation if there was a problem
+				InitialNav();
+			}
+			finally
+			{
+				// Clear the file activated launch args after it's been used
+				Settings.FileActivatedLaunchArg = string.Empty;
+			}
+
+#endif
+
+
 		}
 		else
 		{
@@ -575,10 +589,10 @@ private static void InitialNav()
 	{
 #if APP_CONTROL_MANAGER
 		// Navigate to the CreatePolicy page when the window is loaded and is Admin, else Policy Editor
-		_nav.Navigate(IsElevated ? typeof(Pages.CreatePolicy) : typeof(Pages.PolicyEditor));
+		ViewModelProvider.NavigationService.Navigate(IsElevated ? typeof(Pages.CreatePolicy) : typeof(Pages.PolicyEditor));
 #endif
 #if HARDEN_SYSTEM_SECURITY
-		_nav.Navigate(IsElevated ? typeof(Pages.Protect) : typeof(Pages.Protects.NonAdmin));
+		ViewModelProvider.NavigationService.Navigate(IsElevated ? typeof(Pages.Protect) : typeof(Pages.Protects.NonAdmin));
 #endif
 	}
 

AppControl Manager/AppControl Manager.csproj

@@ -9,6 +9,9 @@
         <UseWinUI>true</UseWinUI>
         <EnableMsixTooling>true</EnableMsixTooling>
 
+        <!-- https://learn.microsoft.com/en-us/microsoft-edge/webview2/how-to/static -->
+        <WebView2LoaderPreference>Static</WebView2LoaderPreference>
+
         <!-- Defined by CsWinRT https://github.com/microsoft/CsWinRT
         Using the latest version as defined in the CsWinRT release notes guarantees that we use the latest CsWinRT projections features.
 

AppControl Manager/AppSettings/Main.cs

@@ -56,6 +56,7 @@ internal Main(ApplicationDataContainer LocalSettings)
 		MainWindowHeight = ReadValue(nameof(MainWindowHeight), MainWindowHeight);
 		MainWindowIsMaximized = ReadValue(nameof(MainWindowIsMaximized), MainWindowIsMaximized);
 		ListViewsVerticalCentering = ReadValue(nameof(ListViewsVerticalCentering), ListViewsVerticalCentering);
+		StickyHeadersForListViews = ReadValue(nameof(StickyHeadersForListViews), StickyHeadersForListViews);
 		CacheSecurityCatalogsScanResults = ReadValue(nameof(CacheSecurityCatalogsScanResults), CacheSecurityCatalogsScanResults);
 		PromptForElevationOnStartup = ReadValue(nameof(PromptForElevationOnStartup), PromptForElevationOnStartup);
 		AutomaticAssignmentSidebar = ReadValue(nameof(AutomaticAssignmentSidebar), AutomaticAssignmentSidebar);
@@ -68,6 +69,7 @@ internal Main(ApplicationDataContainer LocalSettings)
 		LaunchActivationAction = ReadValue(nameof(LaunchActivationAction), LaunchActivationAction);
 		ScreenShield = ReadValue(nameof(ScreenShield), ScreenShield);
 		PublishUserActivityInTheOS = ReadValue(nameof(PublishUserActivityInTheOS), PublishUserActivityInTheOS);
+		LinkPreviewsForSecurityMeasure = ReadValue(nameof(LinkPreviewsForSecurityMeasure), LinkPreviewsForSecurityMeasure);
 	}
 
 	/// <summary>
@@ -264,6 +266,22 @@ internal bool ListViewsVerticalCentering
 		}
 	}
 
+	/// <summary>
+	/// Whether ListView headers remain visible when scrolling through the list content.
+	/// Only applies to ListViews that have items grouping.
+	/// </summary>
+	internal bool StickyHeadersForListViews
+	{
+		get;
+		set
+		{
+			if (SP(ref field, value))
+			{
+				SaveValue(nameof(StickyHeadersForListViews), field);
+			}
+		}
+	} = true;
+
 	/// <summary>
 	/// Cache the security catalog scan results to speed up various components of the app that use them.
 	/// </summary>
@@ -448,4 +466,19 @@ internal bool PublishUserActivityInTheOS
 			}
 		}
 	} = true;
+
+	/// <summary>
+	/// Whether link previews are enabled for security measures when hovering over.
+	/// </summary>
+	internal bool LinkPreviewsForSecurityMeasure
+	{
+		get;
+		set
+		{
+			if (SP(ref field, value))
+			{
+				SaveValue(nameof(LinkPreviewsForSecurityMeasure), field);
+			}
+		}
+	} = true;
 }

AppControl Manager/Cargo.toml

@@ -17,7 +17,7 @@ homepage = "https://github.com/HotCakeX/Harden-Windows-Security"
 repository = "https://github.com/HotCakeX/Harden-Windows-Security"
 documentation = "https://github.com/HotCakeX/Harden-Windows-Security"
 publish = false
-rust-version = "1.90"
+rust-version = "1.91"
 
 [profile.release]
 codegen-units = 1

AppControl Manager/CustomUIElements/SigningDetailsDialog.xaml.cs

@@ -23,6 +23,7 @@
 using AppControlManager.IntelGathering;
 using AppControlManager.Main;
 using AppControlManager.Others;
+using AppControlManager.ViewModels;
 using Microsoft.UI.Xaml;
 using Microsoft.UI.Xaml.Controls;
 using Microsoft.UI.Xaml.Input;
@@ -191,7 +192,7 @@ private void OpenAppSettingsButton_Click(object sender, RoutedEventArgs e)
 		// Hide the dialog box
 		this.Hide();
 
-		App._nav.Navigate(typeof(Pages.Settings), null);
+		ViewModelProvider.NavigationService.Navigate(typeof(Pages.Settings), null);
 	}
 
 	/// <summary>

AppControl Manager/CustomUIElements/SigningDetailsDialogForRemoval.xaml.cs

@@ -23,6 +23,7 @@
 using AppControlManager.IntelGathering;
 using AppControlManager.Main;
 using AppControlManager.Others;
+using AppControlManager.ViewModels;
 using Microsoft.UI.Xaml;
 using Microsoft.UI.Xaml.Controls;
 using Microsoft.UI.Xaml.Input;
@@ -194,7 +195,7 @@ private void OpenAppSettingsButton_Click()
 		// Hide the dialog box
 		this.Hide();
 
-		App._nav.Navigate(typeof(Pages.Settings), null);
+		ViewModelProvider.NavigationService.Navigate(typeof(Pages.Settings), null);
 	}
 
 	/// <summary>

AppControl Manager/MainWindow.xaml

@@ -440,7 +440,7 @@
                                    Padding="10"
                                    AutomationProperties.LandmarkType="Custom"
                                    AutomationProperties.LocalizedLandmarkType="Bread Crumb Bar Navigation and Page Title"
-                                   Margin="20,10,0,10"
+                                   Margin="20,10,0,5"
                                    ItemsSource="{x:Bind ViewModel.Breadcrumbs}"
                                    ItemClicked="{x:Bind Nav.BreadcrumbBar_ItemClicked}">
 
@@ -464,7 +464,7 @@
 
                     <!-- Global margin settings for every page's content -->
                     <Frame x:Name="ContentFrame"
-                           Margin="15,15,15,10"
+                           Margin="15,10,15,10"
                            Grid.Row="1"
                            AutomationProperties.LandmarkType="Main" />
 

AppControl Manager/Others/FileDialogHelper.cs

@@ -20,7 +20,6 @@
 using System.IO;
 using System.Runtime.InteropServices;
 #if HARDEN_SYSTEM_SECURITY
-using HardenSystemSecurity;
 #endif
 
 namespace AppControlManager.Others;
@@ -30,7 +29,12 @@ internal unsafe static class FileDialogHelper
 	// Location where File/Folder picker dialog will be opened
 	// It is only the directory where the first dialog will be opened in, it will then be replaced by the directory
 	// That user browses to to pick a single file/directory
+#if APP_CONTROL_MANAGER
 	private static string DirectoryToOpen = App.IsElevated ? GlobalVars.UserConfigDir : Path.GetPathRoot(Environment.SystemDirectory)!;
+#endif
+#if HARDEN_SYSTEM_SECURITY
+	private static string DirectoryToOpen = Path.GetPathRoot(Environment.SystemDirectory)!;
+#endif
 
 	[StructLayout(LayoutKind.Sequential)]
 	internal struct StringArray

AppControl Manager/Others/GlobalVars.cs

@@ -18,7 +18,6 @@
 using System;
 using System.IO;
 #if HARDEN_SYSTEM_SECURITY
-using HardenSystemSecurity;
 #endif
 using Microsoft.Windows.ApplicationModel.Resources;
 
@@ -84,7 +83,6 @@ internal static string GetStr(string key)
 		Environment.GetEnvironmentVariable("SystemDrive") + @"\",
 		"Windows", "schemas", "CodeIntegrity", "cipolicy.xsd");
 
-
 #if HARDEN_SYSTEM_SECURITY
 	// Storing the path to the app's folder in the Program Files
 	internal static readonly string UserConfigDir = Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles), "Harden System Security");
@@ -187,6 +185,8 @@ internal static string GetStr(string key)
 	/// </summary>
 	internal static readonly string SystemDrive = Environment.GetEnvironmentVariable("SystemDrive") ?? "C:";
 
+#if APP_CONTROL_MANAGER
+
 	static GlobalVars()
 	{
 		if (!App.IsElevated)
@@ -198,4 +198,7 @@ static GlobalVars()
 			_ = Directory.CreateDirectory(UserConfigDir);
 		}
 	}
+
+#endif
+
 }