The idea to run different portions of the same process as different users not only looks weird, but is also [very] bad from security point of view — no matter how many threads you create, they still run in the same address space so nothing will stop one user-thread from accidentally or intentionally accessing another user-thread's data.
On 10/21/2015 02:25 PM, NoMercy wrote: > Thanks for all your replies, > > Currently it works like this; > the service uses "CreateProcessAsUser" to runs an other process in the > user session and it handles all the stuff. It was ok until now since the > target systems were only single-user environments. > > but since we are trying to switch to multiuser environment, every new > user process means a new port and stuff and more complications but if I > can manage do it all from the service, it'll make a lot more sense. > I just need to know if it would work reliably. > I'll make some short tests today if it works in the first place but to > test if it reliably runs for as long as system runs is an other matter. > > Thanks again for all your replies. > Cheers, > Emre > > On Wed, Oct 21, 2015 at 1:28 PM, alexander golks <a...@golks.de > <mailto:a...@golks.de>> wrote: > > Am Wed, 21 Oct 2015 12:19:20 +0200 > schrieb André Somers <an...@familiesomers.nl > <mailto:an...@familiesomers.nl>>: > > > Op 21-10-2015 om 11:48 schreef NoMercy: > > > Hello everyone and thanks for you replies, > > > > > > I've a rather advaced question about QThreads (well advanced to my > > > knowledge anyways) > > > > > > I have a Windows service that runs under System user (naturally) but I > > > want to create and run a thread from within that service and change > > > the token of that thread so it runs in user evironment. > > > > > My main question is: why? Why do you want to have a single process run > > code as different users? To me, it feels like a hack. > > > > André > > > > _______________________________________________ > > Interest mailing list > > Interest@qt-project.org <mailto:Interest@qt-project.org> > > http://lists.qt-project.org/mailman/listinfo/interest > > why not simply set correct user/password for this user and let > windows do it for you? > > -- > /* > *"I'm not at all sure this helps you, but as you say there is > nothing to be found about the problem except in czech and my attempt > att "babelfishing" failed miserably" > * > *Husse Jul 30 2007 > */
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Interest mailing list Interest@qt-project.org http://lists.qt-project.org/mailman/listinfo/interest
