Comments (5)
fcharlie
commented on September 7, 2024
此需求应该修改 应用程序清单 设置权限，但与Linux 权限策略仍然有区别
from privexec.
wy16W2pIilK1xgqN
commented on September 7, 2024
谢谢回复！
网上爬文后，大概得知方法了。
首先提取exe 中的manifest文件。
然后修改 requestedExecutionLevel 项的值。
但设定项只要三个：asInvoker highestAvailable requireAdministrator。
实际上就是决定是否提权，而不是降权。
请问是我没搞懂吗？
from privexec.
fcharlie
commented on September 7, 2024
这个是提权的 但在 Windows 系统上降权的话比较麻烦，利用清单降权基本没有办法.
from privexec.
MouriNaruto
commented on September 7, 2024
我记得曾经我看微软的博文谈到了通过icacls来指定一个exe强制以某个完整性级别运行的功能
那个例子貌似是让某目录的计算器程序以始终以IL Low运行
from privexec.
wy16W2pIilK1xgqN
commented on September 7, 2024
我记得曾经我看微软的博文谈到了通过icacls来指定一个exe强制以某个完整性级别运行的功能
那个例子貌似是让某目录的计算器程序以始终以IL Low运行
必须在指定路径？
这样也行，请问有连接吗？
from privexec.
Related Issues (20)
- Use ArgvBuilder Rewrite argv to commandline feature. HOT 1
- Feature Request: extend AppContainer Name support to wsudo HOT 4
- wsudo-tie support AttachConsole to wsudo self HOT 1
- "wsudo -u NoElevated" Starts as High Integrity instead of Medium when Admin Approval Mode is Disabled HOT 2
- Parse reparse points to support detection of Appx subsystems HOT 1
- The release version and --version do not match HOT 1
- Improve configuration file save directory HOT 1
- wsudo running in non-elevated process can't open GUI apps with -T or -S flag HOT 7
- How to grant AppContainer capabilities? HOT 18
- SplitArgv failed (directories with spaces) HOT 3
- Hide window HOT 6
- Elevate current process? HOT 1
- AppExec - Registry ACLs not working HOT 8
- Windows.Storage.StorageFile GetFileFromPathAsync E_ACCESSDENIED within AppContainer HOT 1
- 提问：和nsudo的区别于联系？ HOT 2
- --env 是否能覆盖系统的一些不可修改的环境变量？ HOT 4
- Updated Source for Capabilities
- Can't be used normally. HOT 16
- AppContainer有部分程序无法启动 HOT 1
- Firefox and Chrome do not run in app containers HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from privexec.