On Fri, Sep 23, 2016 at 2:12 PM, eryk sun wrote:
> Each kernel object type has a GENERIC_MAPPING that maps generic rights
> to sets of standard and object-specific rights. Before doing an
> AccessCheck, generic rights have to be mapped to specific rights via
> MapGenericMask.
>
> For the File type
On Fri, Sep 23, 2016 at 10:39 AM, Goku Balu wrote:
> On Tue, Sep 20, 2016 at 9:30 PM, wrote:
>> >
>> > That doesn't seem like a bug to me. GENERIC_WRITE represents several
>> > permissions mashed together, including FILE_WRITE and read control.
>> >
>> > Perhaps try with just FILE_WRITE on its ow
So if we deny WRITE then SYNCHRONIZE will be denied which will in-turn
affect READ. Is there a way to deny WRITE alone without affecting
file/folder read?
Thanks,
Goku
On Tue, Sep 20, 2016 at 9:30 PM, wrote:
>
> >
> > That doesn't seem like a bug to me. GENERIC_WRITE represents several
> > per