Fixed issue #13282: dbgshim fails with E_ACCESSDENIED on Windows.

Mike McLaughlin · Mike McLaughlin · commit b6abc16524ea · 2017-08-22T10:17:29.000-07:00
Changed the open process token from TOKEN_READ to TOKEN_QUERY.
diff --git a/src/utilcode/securityutil.cpp b/src/utilcode/securityutil.cpp
@@ -336,7 +336,7 @@ HRESULT SecurityUtil::GetMandatoryLabelFromProcess(HANDLE hProcess, LPBYTE * ppb
     HandleHolder hToken;
     DWORD err = 0;
 
-    if(!OpenProcessToken(hProcess, TOKEN_READ, &hToken))
+    if(!OpenProcessToken(hProcess, TOKEN_QUERY, &hToken))
     {
         return HRESULT_FROM_GetLastError();
     }

Original file line number	Diff line number	Diff line change
`@@ -336,7 +336,7 @@ HRESULT SecurityUtil::GetMandatoryLabelFromProcess(HANDLE hProcess, LPBYTE * ppb`
`336`	`336`	`HandleHolder hToken;`
`337`	`337`	`DWORD err = 0;`
`338`	`338`
`339`		`- if(!OpenProcessToken(hProcess, TOKEN_READ, &hToken))`
	`339`	`+ if(!OpenProcessToken(hProcess, TOKEN_QUERY, &hToken))`
`340`	`340`	`{`
`341`	`341`	`return HRESULT_FROM_GetLastError();`
`342`	`342`	`}`