Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix privilege elevation for getHomeFolder in Windows #345

Open
chevah-robot opened this issue May 13, 2015 · 0 comments
Open

Fix privilege elevation for getHomeFolder in Windows #345

chevah-robot opened this issue May 13, 2015 · 0 comments

Comments

@chevah-robot
Copy link

T2844 bug was created by adiroiban on 2015-05-13 06:37:59Z.
Last changed on 2017-09-20 18:32:34Z.

On Winodws getHomeFolder make use of executeAsUser and this is bad.

the low level code shell.SHGetFolderPath already receives an impersonation token.

When implementing this I tried to call it without executeAsUser and it failed... I don't know why

we need to look again at this code and see how to implement it without executeAsUser or with executeAsUser in a separate thread

@danuker danuker added the bug label Dec 29, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants