Vulnerability Development mailing list archives
Re: Windows NT does not check permissions after HANDLEs are open
From: Syzop <syz () dds nl>
Date: Thu, 30 Aug 2001 12:58:53 +0200
c0ncept () hushmail com wrote:
The check against the ACL only occurs when the HANDLE is first opened, however. If a HANDLE is opened and permissions on the objecect subsiquently change, the original requestor of the object retains the original access-permissions.
Hi,
Isn't this normal?
At least Linux does the same: only testing permissions when you
do a open(), if you then get write rights, you have them until you close
the file. I just tested it with a little (similar) C program.
Or should it be different with ACLs/NT?
Syzop.
Current thread:
- Windows NT does not check permissions after HANDLEs are open c0ncept (Aug 29)
- Re: Windows NT does not check permissions after HANDLEs are open Blue Boar (Aug 29)
- Re: Windows NT does not check permissions after HANDLEs are open Syzop (Aug 30)
- Re: Windows NT does not check permissions after HANDLEs are open Thor (Aug 30)
- <Possible follow-ups>
- RE: Windows NT does not check permissions after HANDLEs are open Michael Wojcik (Aug 30)
