[Bug 60526] New: wineserver: OpenProcess ignores enabled SeDebugPrivilege; Backblaze 10.0.2+ backup service can't query its own uploader

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=60526

            Bug ID: 60526
           Summary: wineserver: OpenProcess ignores enabled
                    SeDebugPrivilege; Backblaze 10.0.2+ backup service
                    can't query its own uploader
           Product: Wine
           Version: 11.20
          Hardware: x86-64
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: wineserver
          Assignee: [e-mail]
          Reporter: [e-mail]
  Target Milestone: ---
      Distribution: ---

Created attachment 82389
  --> http://bugs.winehq.org/attachment.cgi?id=82389
OpenProcess ignores enabled SeDebug

On Windows, if the caller's token has SeDebugPrivilege enabled, OpenProcess
grants the requested access regardless of the target process's security
descriptor (MSDN, OpenProcess: "If the caller has enabled the SeDebugPrivilege
privilege, the requested access is granted regardless of the contents of the
security descriptor"). Wine's server never consults SeDebugPrivilege when
opening a process, so the DACL check always applies.

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.