RE: Raw Sockets and Access Denied

From: Ivan Medvedev [MS] (ivanmed_at_online.microsoft.com)
Date: 06/17/03


Date: Mon, 16 Jun 2003 22:57:46 GMT


Richard,
are you talking about Windows security or .NET Code Access Security here?
Are you getting a SecurityException?
--Ivan
This message is provided "AS IS" with no warranties, and confers no rights

--------------------
>From: "Richard Chandler" <richard.chandler.nospam@mapson.monactive.com>
>Subject: Raw Sockets and Access Denied
>Date: Thu, 12 Jun 2003 09:19:26 +0100
>Lines: 24
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
>Message-ID: <#JuzSvLMDHA.2460@TK2MSFTNGP10.phx.gbl>
>Newsgroups: microsoft.public.dotnet.security
>NNTP-Posting-Host: 213.2.73.218
>Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
>Xref: cpmsftngxa06.phx.gbl microsoft.public.dotnet.security:1614
>X-Tomcat-NG: microsoft.public.dotnet.security
>
>Hi All,
>
>Having established that high security rights are required to use raw
>sockets, I'm unable to pin down exactly what is required in order to create
>a raw socket.
>
>I've got around the problem by (a) using the administrator account and (b)
>writing a COM object to do the socket work instead, both of which are
>undesirable solutions.
>
>What I really want to know is on what security object do I need rights on
to
>do this with any user (that is granted that right)... ?
>
>I was under the false impression that it was to be in the TCB, but having
>checked my security policy that is not the case.
>
>Can anyone shed any light ?
>
>Thanks,
>
>Richard.
>
>
>
>



Relevant Pages

  • Re: XPSP2 compatability
    ... also require MS to prevent normal users from writing to raw sockets. ... I'm not saying that this is the only security hole in Windows. ... > Ethical Hacking at the InfoSec Institute. ... Check out our Advanced Hacking ...
    (Pen-Test)
  • RE: Raw Sockets in WinXP
    ... Subject: Raw Sockets in WinXP ... It is a hobby and therefore does not get a lot of time for "security". ... updates the .dats and takes care of the *nix firewall/ids at home. ...
    (Security-Basics)
  • RE: Raw Sockets in WinXP
    ... Subject: Raw Sockets in WinXP ... My questions to the security guru's out ... Should they decided if I can craft my own packet? ...
    (Security-Basics)
  • Re: Secure shared web hosting using MAC Framework
    ... run the web server and web users shell in a jail, ... Those rights should have priority on any traditional unix file ... This directive allows you to disable certain functions for security reasons. ... Web users and executed web scripts shouldn't be able to read ...
    (FreeBSD-Security)
  • Orwell meets Kafka
    ... THE OTHER DAY, the new secretary of homeland security, Michael Chertoff, scrapped the moronic rule requiring everyone to stay seated for 30 minutes coming in or out of Ronald Reagan Washington National Airport. ... If the American republic was built on any core principle, that principle is the rights of people to be free from the abuses of unchecked power. ...
    (soc.culture.australian)