Hi,
On Mon, Dec 16, 2019 at 5:18 PM Simon Rozman wrote:
>
> Hi,
>
> TLDR:
> (i) stealing SYSTEM access from winlogon.exe is not a good thing to do
>
>
>
> This doesn't happen for the majority of use cases - only when iservice is not
> used. We also
> elevate only for the single DeviceIOControl c
Hi
On Mon, Dec 16, 2019 at 4:31 PM Lev Stipakov wrote:
>>
>> I have already said what I think of it. As an admin I wouldn't like to see
>> users running processes that elevate to SYSTEM like this.
>
>
> Would it be too much if
>
> - openvpn.exe process detects that it is not started by interacti
Hi,
>>> TLDR:
>>> (i) stealing SYSTEM access from winlogon.exe is not a good thing to do
>>
>>
>> This doesn't happen for the majority of use cases - only when iservice is
>> not used. We also
>> elevate only for the single DeviceIOControl call.
>
> I understand. But stealing access token from
>
> I have already said what I think of it. As an admin I wouldn't like to see
> users running processes that elevate to SYSTEM like this.
>
Would it be too much if
- openvpn.exe process detects that it is not started by interactive service
- interactive service process is running
- wintun is
Hi
On Mon, Dec 16, 2019 at 3:01 PM Lev Stipakov wrote:
>
> Hi,
>
> Thanks for looking into this. See my comments below.
>
>> TLDR:
>> (i) stealing SYSTEM access from winlogon.exe is not a good thing to do
>
>
> This doesn't happen for the majority of use cases - only when iservice is not
> used.
Hi,
Thanks for looking into this. See my comments below.
TLDR:
> (i) stealing SYSTEM access from winlogon.exe is not a good thing to do
>
This doesn't happen for the majority of use cases - only when iservice is
not used. We also
elevate only for the single DeviceIOControl call.
Below you menti
Hi,
The OpenVPN 3 Linux v7 beta release has finally arrived, overdue for
several months. This is available in our git repositories [0] and URLs for
source tarballs are listed later in this e-mail. We have pre-built
binaries for the following Linux distributions:
* Fedora 29, 30, 31 and Rawh
Hi,
I was reluctant to review this as I do not understand
the event processing in OpenVPN well enough. Now that Stefann
has reviewed those bits and given an Ack, here are some
comments on the rest of the code.
TLDR:
(i) stealing SYSTEM access from winlogon.exe is not a good thing to do
(ii) with
From: Lev Stipakov
Implemented according to Wintun documentation
and reference client code.
Wintun uses ring buffers to communicate between
kernel driver and user process. Client allocates
send and receive ring buffers, creates events
and passes it to kernel driver under LocalSystem
privileges.
