[Winpcap-bugs] Patch: implemented basic security for capture driver

KJKHyperion hackbunny at reactos.com
Thu Jun 23 17:05:48 GMT 2005


See attachment. The simplest and crudest implementation possible (I'm 
lazy), more like a proof of concept, but a positive proof at it. Patch 
packet.sys (patch developed against 3.1 beta 4), recompile, compile 
packetcp, run it (it's a control panel applet) and it will create a 
"SecurityDescriptor" value under 
HKLM\System\CurrentControlSet\Services\NPF\Parameters containing a 
security descriptor you can edit with the standard GUI. The driver 
simply applies the ACL to all the devices it creates (needs to be 
restarted, of course. The control panel applet could do it, but as I 
said I'm lazy). It works, tested with Ethereal. Lacks polish but makes 
my stomach a little less queasy whenever I'm running WinPCap. Please let 
me know about the fate of this patch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: packetcp.zip
Type: application/x-zip-compressed
Size: 9723 bytes
Desc: not available
Url : http://www.winpcap.org/pipermail/winpcap-bugs/attachments/20050623/ed9b5f92/packetcp.bin


More information about the Winpcap-bugs mailing list