Skip to content

Weak default ACLs on Windows #547

Open
@Demi-Marie

Description

@Demi-Marie

On Windows, the ACL for IPC endpoints defaults to allowing access to all users, which is insecure. They should only allow access to the user running the server. Similarly, the client must check that the server named pipe is owned by the client’s user or the system administrator, and must ensure that the security quality of service is limited to Identification.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions