dacl

SetSecurityDescriptorSddlForm(string sddlForm)

Hi! I dont find any usefull website according to this API. What's the format of the String? The content? Thanks ...

SACL on Services using C# || get a handle to a service that has the ACCESS_SYSTEM_SECURITY rights using C#

Anyone have any idea how to get the SACL's on a remote service using C#? I've tried numerous different methods, and basically nothing works. I can get the DACL's and SACL's on the local machine, but getting either on a remote machine doesn't appear to be possible. What I've done is create a class called ServiceSecurity that inherits fro...

Am I using SetNamedSecurityInfo incorrectly? The ACL of my file doesn't seem to be being modified properly.

I'm trying to enable and disable certain access privileges on a file. I figured out that to do this, you have to mess with DACLs. I'm using the following code to modify the file's DACL: void set_DACL_for_object(const char *object, SE_OBJECT_TYPE object_type, int access_perms, int access_mode) { PACL pDA...

WiX Permissions, how do I express 'Modify' in terms of DACL flags

I'm attempting to apply custom rights to a folder as part of a WiX 3.0.4318.0 installer. In terms of the Security properties UI in explorer, I want to add Modify to the rights for BUILTIN\Users. Obviously it needs to be resilient against localisation of the user name. So based on my research to date, I want at least: <CreateFolder Dir...

Is there a way to modify a process DACL in C#

I have legacy C++ code that changes a process DACL and am trying to use the managed code classes in .NET 3.5. I found code on the web where someone created a SetAclOnServices class that extends the NativeObjectSecurity class for services. I thought that I could implement this and just change the ResourceType.Service to ResourceType.Kerne...

How can I add USERS to a file DACL programmatically?

I have an application that has script files which are stored in Program files. Users can edit and override these scripts, which are then stored in "my documents/app scripts". I've added an elevated application that will be run by the user (and prompt for elevation) which can delete exiting all user scripts, or publish scripts to be made ...