Creating an Access Token for a Process Specific Security Descriptor

Question

Is it possible to create a custom Access Token to create Access Control Entries for a Discretionary Access Control List that will allow only certain processes to access a Global Mutex Object if they have the matching Access Token?

This is in Windows using C++.

user3099493 · Accepted Answer · 2016-02-26 19:44:56Z

0

DACL contains SID's representing users or groups. So you can change access rights for certain users or groups not for processes. This means that if you change DACL of an object, processes having matching SID's will be affected.

You can create a Security Descriptor and pass it to CreateMutex() or change its DACL after the mutex is created using e.g.

SetSecurityInfo(Mutex, SE_KERNEL_OBJECT, DACL_SECURITY_INFORMATION, NULL, NULL, pDACL, NULL);

answered Feb 26, 2016 at 19:44

user3099493

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Creating an Access Token for a Process Specific Security Descriptor

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related