Changing Process ACL's

[sternr]

Hey,

I know how to get a process's DACL using the GetKernelObjectSecurity.
But how can I modify and update I don't know.

Any help\example would be greatly appreciated!

Thanks ahead!

sternr

 

[Nicholas Paldino [.NET/C# MVP]]

sternr,

Well, there is always SetKernelObjectSecurity.

 

[sternr]

sternr,

    Well, there is always SetKernelObjectSecurity.

--
          - Nicholas Paldino [.NET/C# MVP]
          - (e-mail address removed)

Hey,

I know how to get a process's DACL using the GetKernelObjectSecurity.
But how can I modify and update I don't know.

Any help\example would be greatly appreciated!

Thanks ahead!

sternr- Hide quoted text -

- Show quoted text -

Hey,
But how do I manipulate the ACL's?

Thanks

 

[Nicholas Paldino [.NET/C# MVP]]

You shouldn't manipulate SECURITY_DESCRIPTOR structures directly.
Rather, use the following APIs to modify the various parts of the security
descriptor:

GetSecurityDescriptorControl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorLength
GetSecurityDescriptorOwner
GetSecurityDescriptorRMControl
GetSecurityDescriptorSacl
InitializeSecurityDescriptor
IsValidSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorRMControl
SetSecurityDescriptorSacl

--
- Nicholas Paldino [.NET/C# MVP]
- (e-mail address removed)

sternr,

Well, there is always SetKernelObjectSecurity.

--
- Nicholas Paldino [.NET/C# MVP]
- (e-mail address removed)

Hey,

I know how to get a process's DACL using the GetKernelObjectSecurity.
But how can I modify and update I don't know.

Any help\example would be greatly appreciated!

Thanks ahead!

sternr- Hide quoted text -

- Show quoted text -

Hey,
But how do I manipulate the ACL's?

Thanks

 

[Willy Denoyette [MVP]]

And much better is to author a class that derives from the
System.Security.AccessControl.NativeObjectSecurity class.
I have a class that does exactly this for Thread objects.
Willy.

You shouldn't manipulate SECURITY_DESCRIPTOR structures directly.
Rather, use the following APIs to modify the various parts of the security
descriptor:

GetSecurityDescriptorControl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorLength
GetSecurityDescriptorOwner
GetSecurityDescriptorRMControl
GetSecurityDescriptorSacl
InitializeSecurityDescriptor
IsValidSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorRMControl
SetSecurityDescriptorSacl

--
- Nicholas Paldino [.NET/C# MVP]
- (e-mail address removed)

sternr,

Well, there is always SetKernelObjectSecurity.

--
- Nicholas Paldino [.NET/C# MVP]
- (e-mail address removed)

Hey,

I know how to get a process's DACL using the GetKernelObjectSecurity.
But how can I modify and update I don't know.

Any help\example would be greatly appreciated!

Thanks ahead!

sternr- Hide quoted text -

- Show quoted text -

Hey,
But how do I manipulate the ACL's?

Thanks