473,698 Members | 2,439 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Anyone know how to start a process with low integrity from a process with higher integrity?

WTH
I ask because I've got a windows service I've written that manages failover
and replication for our products (or even 3rd party applications) and it
worked great right until I tested it (for ease of testing purposes) with
Internet Explorer (iexplore.exe) - I was testing handling argument list
buffer overflows.

What I found with iexplore.exe is that because my windows service is running
with high privileges (due to running under the local system account) and it
was using CreateProcessAs User to launch the browser into the logged in user
session (so the user could see the UI), explorer was detecting this as a
security violation (a high integrity process running in a low integrity user
session) and it was spawning a low integrity iexplore.exe process on its own
and the original iexplore.exe was terminating immediately (I am aware of
this because my service tracks the process IDs of the processes it creates
for failover purposes and these IDs do not match those of iexplore.exe for
more than a few tens of milliseconds.)

This isn't a big deal except that it enlightened me that I should not be
launching processes in a low integrity environment with my service's high
integrity security descriptor (I use the default.)

Anyone out there know how to create a low integrity security descriptor?

I've tried ConvertStringSe curityDescripto rToSecurityDesc riptorW using
"S:(ML;;NW;;;LW )" (which I believe means 'low integrity please') but it does
not appear to make any difference. iexplore.exe is still re-launching
itself.

Knowing .NET (I'm from a C++ background) there's a much smarter way to do
this, any pointers?

Thanks,

WTH:)

Jan 11 '08 #1
0 1913

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

15
1697
by: Brandon J. Van Every | last post by:
Is anyone using Python for .NET? I mean Brian's version at Zope, which simply accesses .NET in a one-way fashion from Python. http://www.zope.org/Members/Brian/PythonNet Not the experimental ActiveState stuff, which tried to compile IL and apparently didn't succeed. Two motives for the question: 1) whether to use it for my C++ / C# / .NET / Python (?) game project. It's a prototype, so in this context a "mostly working beta" is...
7
1706
by: Bruce D | last post by:
My program in connecting to a web site and I want to know how long it takes to connect to this site. I'm assuming I need to use some sort of timer. This is a console application. Here are the lines of code. ' set some time var Dim lWebRequest As System.Net.WebRequest = System.Net.WebRequest.Create(lURL) lWebRequest.Timeout = lTimeOut Dim lWebResponse As System.Net.WebResponse = lWebRequest.GetResponse() ' set second time var and...
45
3397
by: salad | last post by:
I'm curious about your opinion on setting relationships. When I designed my first app in Access I'd go to Tools/Relationships and set the relationships. Over time I'd go into the window and see relationship spaghetti....tables/queries all overthe place with lots of relationship lines between here and there. After that first app I didn't do relationships. If I had a query, I defined the relationship. Many of the times when I create a...
10
2177
by: Extremest | last post by:
I know there are ways to make this a lot faster. Any newsreader does this in seconds. I don't know how they do it and I am very new to c#. If anyone knows a faster way please let me know. All I am doing is quering the db for all the headers for a certain group and then going through them to find all the parts of each post. I only want ones that are complete. Meaning all segments for that one file posted are there. using System;
5
2722
by: tony | last post by:
I'm using PHP 5 on Win-98 command line (ie no web server involved) I'm processing a large csv file and when I loop through it I can process around 275 records per second. However at around 6,000 records this suddenly drops off to around 40 records per second. This is a big problem as the "live" list is over 4 million records long. I'd break it up but this is to be a regular test so that would be messy
2
6059
by: Fred Heida | last post by:
Hi, Question on Vista Run As Administrator. If i have exe which creates a child process, using the Process class, and this exe is Run As Asministror, is there a way to have the child process also Run As Asministror with out confirmation for this (as this is already doen my the main process) ? Cheers,
169
9074
by: JohnQ | last post by:
(The "C++ Grammer" thread in comp.lang.c++.moderated prompted this post). It would be more than a little bit nice if C++ was much "cleaner" (less complex) so that it wasn't a major world wide untaking to create a toolchain for it. Way back when, there used to be something called "Small C". I wonder if the creator(s) of that would want to embark on creating a nice little Small C++ compiler devoid of C++ language features that make...
6
1250
by: mcse jung | last post by:
Here is asample program that writes a program and then executes it. Do you knowof a much simpler way of writing a program that writes a program? """ ----------------------------------------------------------------------------- Name: _writePythonCode.py Purpose: This script writes Python code and thentransfers control to it. Author: MCSEJUNG
6
1656
by: Bob | last post by:
Hi, I have an application that uses a excel in conjuction with a third party application. I create an excel instance in c# and mark it as invisible. The third party application is programmed to interact with excel and everything works fine as I monitor interactions with my hidden excel sheet. The problem comes if a user opens another instance of excel. Is there any way that I can use the process classes or another means to increase...
0
9170
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
9031
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
8904
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
7741
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
6531
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5867
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
4624
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
3052
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
2341
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.