SAFER plug-in: Difference between revisions
From NSIS Wiki
Jump to navigationJump to search
mNo edit summary |
m (Removed from plug-in category) |
||
| (4 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
{{PageAuthor|Anders}} | {{PageAuthor|Anders}} | ||
<div style="border: 1px solid #707020; background-color:#fafa70; color:#202010; padding:0.3em;"><font size="-1"><b>Note:</b></font> The Windows SAFER API was never integrated with UAC integrity levels. This plug-in is not sufficient to create a sandbox on Vista and later.</div> | |||
== Links == | == Links == | ||
| Line 5: | Line 8: | ||
== Description == | == Description == | ||
'''Version:''' 0.1 - 20061222 | '''Version:''' 0.1 - 20061222<br> | ||
'''Supported on:''' | '''Supported on:''' Win XP/Vista (SAFER::SupportsSAFER call supported on all 32 bit versions) | ||
The SAFER plugin uses the SAFER | The SAFER plugin uses the [http://docs.microsoft.com/en-us/windows/win32/secmgmt/management-functions#safer-functions SAFER API] to create a new process with a restricted token. | ||
Based on code/info from http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure11152004.asp | Based on code/info from <!-- http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure11152004.asp -->[http://web.archive.org/web/20070301182208/http://msdn2.microsoft.com/en-us/library/ms972827.aspx MSDN] | ||
Supported levels are: | Supported levels are: | ||
| Line 32: | Line 35: | ||
Written by Anders (For fun and profit?) | Written by Anders (For fun and profit?) | ||
[[Category: | [[Category:Deprecated]] | ||
Latest revision as of 17:55, 25 August 2021
| Author: Anders (talk, contrib) |
Note: The Windows SAFER API was never integrated with UAC integrity levels. This plug-in is not sufficient to create a sandbox on Vista and later.
Links
SAFER.zip (3 KB)
Description
Version: 0.1 - 20061222
Supported on: Win XP/Vista (SAFER::SupportsSAFER call supported on all 32 bit versions)
The SAFER plugin uses the SAFER API to create a new process with a restricted token. Based on code/info from MSDN
Supported levels are:
SAFER_LEVELID_CONSTRAINED SAFER_LEVELID_UNTRUSTED SAFER_LEVELID_NORMALUSER
Usage Example
# Check for SAFER api support (this call should be supported on any NT system, # but not Win9x so check for that before you call this dll (Links directly to CreateProcessAsUser) SAFER::SupportsSAFER # $0 now contains 1 if SAFER is supported or 0 if not #Start calculater with SAFER_LEVELID_CONSTRAINED SAFER::Exec CONSTRAINED "calc.exe"
Credits
Written by Anders (For fun and profit?)
