Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of peter.crowther3@googlemail.com
 designates 209.85.219.223 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=googlemail.com; s=gamma;
        h=mime-version:sender:in-reply-to:references:date
         :x-google-sender-auth:message-id:subject:from:to:content-type;
        b=KOb2NSe0gGHE7IL3AHifHIFm8tUrJXsPI5OOPVzAX3XCUilueaM7EiVmMn1OD6HnK8
         Bwj5NX4lr4N5VFojVRjhQytYiG46h3nxMUcPgg3eoSinNHbItp3oV7gpHlidk+pMxsHs
         8wSWTNtnJHnF/wSRggm6XNGgHng+/IyrQP7kg=
MIME-Version: 1.0
Sender: peter.crowther3@googlemail.com
In-Reply-To: <948126CDFED9634D8B12AF27F009EDC501E8F96F@oce-exbe03-v.oce.net>
References: <a84ecebb1001070607w90ee940k71d6565b6db10b0d@mail.gmail.com>
	 <948126CDFED9634D8B12AF27F009EDC501E8F96F@oce-exbe03-v.oce.net>
Date: Thu, 7 Jan 2010 15:00:00 +0000
Message-ID: <e0c148a1001070700h597bd45x6a1145571f2b1d6c@mail.gmail.com>
Subject: Re: How to change effective user id on Windows
From: Peter Crowther <peter.crowther@melandra.com>
To: Tomcat Users List <users@tomcat.apache.org>
Content-Type: text/plain; charset=ISO-8859-1

2010/1/7 Looijmans, Mike <mike.looijmans@oce.com>:
> The current configuration is correct in terms of security - the 'SYSTEM'
> user is a limited account that has no access to the desktop nor shared
> network resources.

Sorry to pick you up on this one, Mike, but I think you're thinking of
Local*Service*, not Local*System*.  LocalSystem has full
administrative access to the local computer, including (for example)
being able to write a rogue DLL to a spare directory, then amend the
registry so that that DLL is loaded by every process that runs on the
machine from this point onwards.  Or create a new local account that
*does* have desktop access and spawn a process running as that user.
If you can compromise LocalSystem, you've got the machine.

Windows' LocalSystem is very, very close to Unix's root.  If you want
a non-privileged account, use LocalService not LocalSystem.  See, for
example http://blogs.msdn.com/jmanning/archive/2008/04/06/localsystem-root-localservice-nobody.aspx

- Peter

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org