How to add security attributes for non admin rights account in creatnamedpipe method of win API

Question

I am creating a named pipe in windows service running on local syastem account with security attribute as Intptr.Zero in CreateNamedPipe() method of Windows API.

The problem is that this named pipe is not accesible to the user account running the client application and calling CreateFile() method.

Now I have googled a lot and found out that we can change the security attributes but I am not able to do that. Please help me in recitfying the issue. This is very urgent I dont have much time.

Answer 1

I just ran in to this problem myself on Friday. If you are using .net 3.5 or higher see my question on how to set the permissions. using System.IO.Pipes (In summary create a PipeSecurity and add access rules for the users group with read/write permissions.)

Answer 2

What exactly are you not able to do, and what have you tried? You have to change the parameter type of the last parameter from IntPtr to ref SECURITY_ATTRIBUTES and pass in the security settings explicitly.

Creating a security descriptor manually in code can get messy. Using the string representation with ConvertStringSecurityDescriptorToSecurityDescriptor makes it a little bit less painfull.

Answer 3

Hi, Creating a file in non-application directories (Directory other than where the application resides), is considerred to be a restricted activity. This is to protect your system from being edited unknowingly by any remote assemblies.

If you feel an assembly is a trusted assembly that won't harm your computer, you can say so and make it access some of the restricted areas.

1. Goto to Control Panel.
2. Select Administrative Tools.
3. Open the Microsoft .Net Framework 2.0 Configuration.
4. It'll open up the Framework Configuration tool.
5. Here, expand .Net Framework 2.0 Configuration, My Computer.
6. Right Click on the Runtime Security Policy and select "Trust assembly"
7. Here you can follow the wizard to select your assembly and apply the required permission to your assembly.

Refer: http://support.microsoft.com/kb/815147

Does it help?

Answer 4

Finally after hell lot of googling I found out the solution to my problem. I used two more win api methods to set access to user account. the methods are as follows

1. SetSecurityDescriptorDacl()
2. InitializeSecurityDescriptor()

for detailed answer you can refer to what i refered... http://www.codeproject.com/KB/threads/CodeFX_IPC.aspx?display=Print

Thanks for your answers....