[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: ACLs null on NT

To: Nick Mathewson <nickm@xxxxxxxxxxxxx>, or-talk@xxxxxxxxxxxxx
Subject: Re: ACLs null on NT
From: Lee Fisher <blibbet@xxxxxxxxx>
Date: Tue, 08 Aug 2006 17:03:31 -0700
Delivered-to: archiver@seul.org
Delivered-to: or-talk-outgoing@seul.org
Delivered-to: or-talk@seul.org
Delivery-date: Tue, 08 Aug 2006 20:05:24 -0400
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:user-agent:mime-version:to:subject:references:in-reply-to:x-enigmail-version:content-type:content-transfer-encoding; b=gKLTSmszKskb20am3cK3Vrbn5DpCbebKPuT2BhPu1QnCayNzaQUkxm0vAmmpo1H22gKK3dxsyIGMCyVq2LvY2PBc5hzb2e/83qUiAJ/XLM+7/fN/Ci7bUQsqCwevgP5iBdPL4hRwtSICFWN6UKijJ9Cvy4BAHxXxPemk2snhIcY=
In-reply-to: <20060808215909.GF6901@totoro.wangafu.net>
References: <44D7AF1F.8030601@gmail.com> <20060808215909.GF6901@totoro.wangafu.net>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx
User-agent: Thunderbird 1.5.0.5 (Macintosh/20060719)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Read  "19 Deadly Sins of Software Security", chapter 12 is on this auth
issue. It is written for a Unix person, to understand also having to
address NT ACLs.

Get the Platform SDK (now called the Windows SDK). Grep through the
samples for SECURITY_DECRIPTOR, among other things. There are a few
simple samples that setup an ACL for a handle.

Read "Secure Programming Cookbook", chapter 2 (access control), 2
patterns, 1 for Unix, 1 for NT.

Again, this is just untested observation. I am _not_ sitting here in a
debugger on an NT box, reading all of your Tor data.... :-)

Please put "strong Windows skills" on the RFP for the students!

Lee

> Hi, Lee!  This looks like good research.  There's one big problem,
> though: our windows skills are weak.  We'll either need a patch for
> this stuff, or more specific instructions about what exactly to do, or
> this could take a very long time to fix.

-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAkTZJkAACgkQw3D+nSm51yhzpwCgtBB+NuGd5JRBGiBjz7JJv9EI
0o4AnjtPf7Dw0lzPGz7UoI1IJwtZPjET
=zmc/
-----END PGP SIGNATURE-----

Follow-Ups:
- Re: ACLs null on NT
  - From: eric.jung

References:
- ACLs null on NT
  - From: Lee Fisher
- Re: ACLs null on NT
  - From: Nick Mathewson

Prev by Author: ACLs null on NT
Next by Author: Re: My ExcludeNodes list...post yours
Previous by thread: Re: ACLs null on NT
Next by thread: Re: ACLs null on NT
Index(es):
- Author
- Thread