-
Notifications
You must be signed in to change notification settings - Fork 1.6k
Update ObjectSecurity.xml #3444
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
When you call the method SetAccessRuleProtection with both parameters on true, you may create a non-canonical DACL. I just made the most important changes. if you want to provide more details and e.g. code to "repair" the ACE order, I think this should go to a separate topic. I have a colleague who provided sample code.
Thanks for your PR @HerbertMauerer. @bartonjs can you take a look? |
@carlossanlop Can you help get this reviewed? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for your contribution, @HerbertMauerer . I provided a suggestion for you to consider.
The change is OK, I would want to add a reference link to: https://docs.microsoft.com/en-us/windows/win32/secauthz/order-of-aces-in-a-dacl |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I want to suggest an additional sentence at the end of the new section:
Please review documentation on the ACE order of an ACL.
Co-Authored-By: Carlos Sanchez Lopez <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This looks good now.
The CI had errors - the script failed to execute. Closing and reopening so the CI runs again. |
When you call the method SetAccessRuleProtection with both parameters on true, you may create a non-canonical DACL.
I just made the most important changes. if you want to provide more details and e.g. code to "repair" the ACE order, I think this should go to a separate topic.
I have a colleague who provided sample code.
Summary
Describe your changes here.
Fixes #Issue_Number (if available)