Vulnerability Development mailing list archives

Re: Windows NT does not check permissions after HANDLEs are open


From: Syzop <syz () dds nl>
Date: Thu, 30 Aug 2001 12:58:53 +0200

c0ncept () hushmail com wrote:

    The check against the ACL only occurs when the HANDLE is first opened, however. If a HANDLE is opened and 
permissions on the objecect subsiquently change, the original requestor of the object retains the original 
access-permissions.

Hi,

Isn't this normal?
At least Linux does the same: only testing permissions when you
do a open(), if you then get write rights, you have them until you close
the file. I just tested it with a little (similar) C program.
Or should it be different with ACLs/NT?

    Syzop.



Current thread: