[pso] [tema1][win] interceptor

[Bercea Gabriel]

Apropo de security pe windows.

 

      status = ZwAdjustPrivilegesToken(tokenHandle,

            FALSE, // don't disable all privileges

            &privSet,

            sizeof(privSet),

            NULL, // old privileges - don't care

            NULL); // returned length

 

Nu incercati niciodata sa dati DisableAllPrivileges pe TRUE, din contextul
lui explorer.exe .

Pentru a crea un proces pe windows, trebuie facut un security check pentru
LPC, de catre procesul initializator, pentru a se conecta la CSRSS, si
trebuie sa face un traverse checking, de care nu va trece in acest caz. Asta
se intampla cel putin in versiunile multi desktop /user , fast user
switching ale windowsului.

 

 

 

Cu respect,

Bercea Gabriel 342 C2

Mobile contact:  (+40)0740049634

eMail: gamitech at gmail.com

 

 

 

 

From: pso-bounces at cursuri.cs.pub.ro [mailto:pso-bounces at cursuri.cs.pub.ro]
On Behalf Of nervos crocodil
Sent: Wednesday, April 01, 2009 9:38 PM
To: Proiectarea Sistemelor de Operare
Subject: Re: [pso] [tema1][win] interceptor

 

cu alte cuvinte ia noul Sci_win.h
<http://cs.pub.ro/%7Epso/wiki/images/2/22/Sci_win.h>  si o sa mearga.
Policy-urile alea au Administrator in loc de so la toate campurile pe ultima
masina virtuala.

Andrei Boeru

2009/4/1 Bercea Gabriel <gamitech at gmail.com>

Reminder:

In  leg cu testarea prin ssh, am postat o solutie acum o saptamana. Inainte
sa apelati useradmin apelati functia aia.

Totul merge OK. Rulati test.exe de oriunde.

 

 

Cu respect,

Bercea Gabriel 342 C2

Mobile contact:  (+40)0740049634

eMail: gamitech at gmail.com

 

 

 

From: pso-bounces at cursuri.cs.pub.ro [mailto:pso-bounces at cursuri.cs.pub.ro]
On Behalf Of alexandra gherghina
Sent: Wednesday, April 01, 2009 9:27 PM
To: Proiectarea Sistemelor de Operare
Subject: Re: [pso] [tema1][win] interceptor

 

toate cele 3 setari au cyg_server, so la  useri.
e ok asa?
eu stiu ca am ultima varianta

2009/4/1 nervos crocodil <ulcica at gmail.com>

Vezi poate asta e problema si la tine:
http://cs.pub.ro/pipermail/pso/2009-March/003089.html

Andrei Boeru


_______________________________________________
pso mailing list
pso at cursuri.cs.pub.ro
http://cursuri.cs.pub.ro/cgi-bin/mailman/listinfo/pso

 


_______________________________________________
pso mailing list
pso at cursuri.cs.pub.ro
http://cursuri.cs.pub.ro/cgi-bin/mailman/listinfo/pso

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cursuri.cs.pub.ro/pipermail/pso/attachments/20090401/ec8acdbe/attachment-0001.htm>