parent
3235adb34d
commit
f06b1880f0
|
@ -1152,13 +1152,13 @@ _FX void *Token_RestrictHelper1(
|
||||||
// Note: Sandboxie originally called here SeFilterToken already,
|
// Note: Sandboxie originally called here SeFilterToken already,
|
||||||
// this duplicated NewTokenObject and discarded it.
|
// this duplicated NewTokenObject and discarded it.
|
||||||
//
|
//
|
||||||
// Howeever the blunt method used in the code below to replace the
|
// However the blunt method used in the code below to replace the
|
||||||
// token SID can create a dependancy on proc->SandboxieLogonSid
|
// token SID can create a dependency on proc->SandboxieLogonSid
|
||||||
// formally AnonymousLogonSid which can cause issues and BSOD's
|
// formally AnonymousLogonSid which can cause issues and BSOD's
|
||||||
// It also has required a mitigation in Token_ResetPrimary, restoring
|
// It also has required a mitigation in Token_ResetPrimary, restoring
|
||||||
// the SID pointer so that the token object can be safely destroyed.
|
// the SID pointer so that the token object can be safely destroyed.
|
||||||
//
|
//
|
||||||
// Therefor the invokation of SeFilterToken has been moved after
|
// Therefore the invocation of SeFilterToken has been moved after
|
||||||
// the SID manipulation, this way the modified TempNewTokenObject
|
// the SID manipulation, this way the modified TempNewTokenObject
|
||||||
// will be quickly and safely disposed of. So we continue from there
|
// will be quickly and safely disposed of. So we continue from there
|
||||||
// on out with a proper unhacked token object.
|
// on out with a proper unhacked token object.
|
||||||
|
|
Loading…
Reference in New Issue