[Winpcap-bugs] Patch: implemented basic security for capture driver
KJKHyperion
hackbunny at reactos.com
Thu Jun 23 17:05:48 GMT 2005
See attachment. The simplest and crudest implementation possible (I'm
lazy), more like a proof of concept, but a positive proof at it. Patch
packet.sys (patch developed against 3.1 beta 4), recompile, compile
packetcp, run it (it's a control panel applet) and it will create a
"SecurityDescriptor" value under
HKLM\System\CurrentControlSet\Services\NPF\Parameters containing a
security descriptor you can edit with the standard GUI. The driver
simply applies the ACL to all the devices it creates (needs to be
restarted, of course. The control panel applet could do it, but as I
said I'm lazy). It works, tested with Ethereal. Lacks polish but makes
my stomach a little less queasy whenever I'm running WinPCap. Please let
me know about the fate of this patch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: packetcp.zip
Type: application/x-zip-compressed
Size: 9723 bytes
Desc: not available
Url : http://www.winpcap.org/pipermail/winpcap-bugs/attachments/20050623/ed9b5f92/packetcp.bin
More information about the Winpcap-bugs
mailing list