ちゃっぴの監禁部屋

ガチガチに締めすぎて動きがとれなくなる。。。

ホーム 連絡をする 同期する ( RSS 2.0 ) Login
投稿数  405  : 記事  5  : コメント  12074  : トラックバック  134

ニュース

記事カテゴリ

書庫

日記カテゴリ

Communities

Personal Information

別の資格情報を用いた安全な起動方法 の続き

Windows Service ですが、default では 'NT AUTHORITY\SYSTEM' で起動するように構成されるのが多いわけですが、'NT AUTHORITY\SYSTEM' 以外の account で起動できるのもご存知の方は多いでしょう。
'NT AUTHORITY\SYSTEM' は password が無い特殊な account なので例外として、その他の account で Windows Service を起動する場合、他の process を起動する場合と同様に password が必須になるわけです。

Service propeties window logon tab

結局、password を保持しいて、必要に応じてそれを取り出して、それを用い別の資格情報で process を起動するというところは変わらないわけですが、とりあえず Windows Service の起動を見てみましょう。

  1. Windows が起動する際に 'winlogon.exe' が SCM(Service Control Manager: 'services.exe') を呼び出す。
  2. SCM は Service の起動を要求されると 'lsass.exe' に対しその Service が起動されるべき account の username と password を取り出すよう要求する。
  3. 'lsass.exe' は暗号化され、かつ security 保護された場所から username, password を取得し、SCM に返す。
  4. SCM は受け取った username, password を使い対象の service process を起動する。

Process tree 'services.exe'

これだけじゃ何が安全かわからないですね。

実は重要なのは、上記であげた process がすべて 'NT AUTHORITY\SYSTEM' で起動していることなんです。
Password の動きを考えください。保存する場所はもともと 'NT AUTHORITY\SYSTEM' のみ扱える場所に保存されていますし、それを渡すのは user の process ではなく、SCM なわけです。

つまり、password は 'NT AUTHORITY\SYSTEM' の手から外には渡らないということになります。
別の資格情報で process を起動したり、偽装する場合でより高い security を求めるには、このあたりを意識する必要があると思います。

投稿日時 : 2007年4月26日 2:09

コメント

# DB への接続 user を共用した場合の client-server 構成での 問題点 2008/05/11 4:37 ちゃっぴの監禁部屋
DB への接続 user を共用した場合の client-server 構成での 問題点

# re: [Windows Mobile]USBキーボードを動かす程度の能力 2017/11/18 16:04 me adc
http://www.prada-outlet-online.com/ prada outlet online store
http://www.difag.fr Nike Air Max


# aqinga17.11.27 2017/11/27 19:11 aqinga
http://www.kruz-graphix.com/ Kruz-graphix
http://www.pandoraaustralia.net/ pandora australia
http://www.katespadeoutletonline.net/ kate spade outlet online
http://www.pandora-bracelets.us pandora bracelets charms
http://www.nesu.fr/ Air Jordan Femme
http://katespade.throngo.com.au/ kate spade australia
http://www.balenciagaoutlet.us/ balenciaga outlet
http://www.prada-outlet.co prada outlet online
aqinga17.11.27

# cc 2018/06/30 8:27 chenlixiang
http://www.airmax.in.net
http://www.dansko-shoes.org
http://www.new-balance-femme-574.fr
http://www.bcbgmax.in.net
http://www.boylondon.us.com
http://www.scarpe-hogan.it
http://www.nikekyrie2.us.com
http://www.nike--airmax.co.uk
http://www.coachpurse.in.net
http://www.nikefree-5.com
http://www.chromeheartssale.us.com
http://www.poloralphlaurenboutique.fr
http://www.salvatoreferragamo.us.org
http://www.supra--shoes.com
http://www.puma--shoes.com
2018.6.30chenlixiang

# re: 「ボタン押下」? 2018/07/24 16:44 chenlixiang
2018.7.24chenlixianghttp://www.jordan14.us
http://www.ferragamosunglasses.us
http://www.insanityworkout.in.net
http://www.montblancpens.net
http://www.lebronshoes12.net
http://www.furlahandbags.us
http://www.tommy--hilfiger.fr
http://www.nikeshoes.me.uk
http://www.adidasoutletstoreonline.us.com
http://www.oakleysunglassessale.name
http://www.pandora-bracciali.it
http://www.nike-airmax-pas-cher.fr
http://www.lunetteoakleypascher.fr
http://www.hermesuk.me.uk
http://www.cartiersunglasses.com
http://www.lululemonoutletsale.us.com
http://www.nikeairmaxtrainers.org.uk
http://www.chanelhandbags.com.co
http://www.nike-mercurial.org
http://www.saclongchamp-pascher.fr
2018.7.24chenlixiang

# re: INI 編集ツール IniModifier を作成してみる (1) 2018/08/20 13:32 chenlixiang
2018.8.20chenlixianghttp://www.longchampsacpascher.fr
http://www.bcbgmax.in.net
http://www.longchamphandbagoutlet.us.com
http://www.nike--huarache.fr
http://www.dakprescottjerseys.us
http://www.jordans13.us.com
http://www.michaelkorspascher.fr
http://www.nikefree.in.net
http://www.rayban--occhiali.it
http://www.michael-jordan.it
http://www.adidascrazy.us
http://www.omegawatches.org.uk
http://www.sunglasses-raybans.us.com
http://www.yeezyshoe.us.com
http://www.goldengooseshoes.us.com
http://www.lebronjames-shoes.com
http://www.rosherun.us.org
http://www.gentlemonstersunglasses.us
http://www.fendi.us.org
http://www.ghdhair.us.com
2018.8.20chenlixiangコメント

# leilei123 2018/08/29 17:39 leilei3915
2018829 leilei3915コメント

http://www.coachfactoryoutletcoach.us.com
http://www.coachoutletsonlines.us.com
http://www.michaelkorsoutletad.us.com
http://www.giuseppe-zanotti.in.net
http://www.cheapuggsoutlets.in.net
http://www.cheapjordanss.us.com
http://www.canadagoose.name
http://www.coachoutletsonlinesale.us.com
http://www.michaelkorsoutletstorefactory.us.com
http://www.canadagoosejacketsshop.ca
http://www.michaelkorsoutlet.name
http://www.coachoutletsalefactory.us.com
http://www.ralphlauren-outlets.co.uk
http://www.guccioutletinc.us.org
http://www.redbottomshoesstore.us.com
http://www.pandoraoutletofficials.us.com
http://www.michaelkorsoutletstoresale.us.com
http://www.adidasoutlet.us.org
http://www.fredperrypoloshirts.org.uk
http://www.pandorajewelryclearance.us.com
http://www.michael-korshandbags.in.net
http://www.nfljerseyswholesalenfl.us.com
http://www.canadagooseoutletcom.us.com
http://www.nikeshoess.us.com
http://www.northfacejacketsoutlets.us.com
http://www.pandoracharmsinc.us.com
http://www.toryburchoutletshoes.us.com
http://www.coachfactoryoutletsonlines.us.com
http://www.katespadeoutlets.name
http://www.coachoutletonlineofficial.us.com


# ivermectin 4 2021/09/28 19:39 MarvinLic
ivermectin 1 http://stromectolfive.online# ivermectin buy online

# ivermectin lotion cost 2021/11/01 15:46 DelbertBup
ivermectin buy australia http://stromectolivermectin19.online# ivermectin eye drops
ivermectin 6

# ivermectin iv 2021/11/03 14:02 DelbertBup
ivermectin canada http://stromectolivermectin19.com/# ivermectin usa price
ivermectin 9 mg

# ivermectin 3mg 2021/11/04 7:45 DelbertBup
ivermectin 12 http://stromectolivermectin19.online# cost of ivermectin cream
ivermectin 5 mg price

# sildenafil 20 mg tablet 2021/12/10 10:21 JamesDat
http://viasild24.online/# sildenafil 20 mg tablet

# careprost for sale 2021/12/12 1:52 Travislyday
http://bimatoprostrx.com/ bimatoprost buy online usa

# careprost for sale https://bimatoprostrx.com
buy bimatoprost
2021/12/13 16:12 Hksfnjkh
careprost for sale https://bimatoprostrx.com
buy bimatoprost


# bimatoprost generic best price 2021/12/13 16:56 Travislyday
http://stromectols.com/ ivermectin 1 topical cream

# stromectol generic 2021/12/17 18:07 Eliastib
pgemwj https://stromectolr.com how much does ivermectin cost

# clomiphene online https://clomidt.com
buy clomid 50mg 2022/01/03 19:24 Clomid
clomiphene online https://clomidt.com
buy clomid 50mg

# re: Windows Service にみる別の資格情報で process を起動する安全な方法 2022/01/27 2:23 yanmaneee
http://www.kawhileonardshoes.us
http://www.airjordansstore.com
http://www.hermesbirkinbags.us.com
http://www.cheap-airjordans.us.com
http://www.jordan12.us.com
http://www.goldengooseshoes.us.org
http://www.kyrie4shoes.us
http://www.michaeljordanshoes.us.com
http://www.birkinbag.us.com
http://www.yeezy-700.com
http://www.curry8.us
http://www.curryshoes.net
http://www.supremeshoodie.com
http://www.kyrie5.org
http://www.supremeshirt.us.com
http://www.lebronjames.us.com
http://www.kyrie7shoes.us
http://www.russellwestbrookshoes.us
http://www.kd10.us
http://www.lebron18.net


# re: Windows Service にみる別の資格情報で process を起動する安全な方法 2022/01/27 2:26 yanmaneee
http://www.yeezy-700.com
http://www.curry8.us
http://www.curryshoes.net
http://www.supremeshoodie.com
http://www.kyrie5.org
http://www.supremeshirt.us.com
コメント

# over the counter health and wellness products 2023/01/27 12:23 Jamessop
https://over-the-counter-drug.com/# over the counter inhalers

# can i get generic clomid 2023/02/12 7:23 Donalddut
Comprehensive side effect and adverse reaction information. Long-Term Effects.
https://clomiphenes.com generic clomid without rx
Drug information. Read here.

# normal surrogate to unchanging migraine medications 2023/04/11 3:11 DouglasGlogs
I recently tried CBD gummies in requital for the opening heyday and I be required to https://www.cornbreadhemp.com/products/full-spectrum-cbd-gummies demand, I'm impressed with the results. I felt more serene and at ease, and my anxiety was significantly reduced. The gummies tasted great and were easy to consume. I'll indubitably be using them again and would urge them to anyone looking in regard to a everyday way to alleviate bring into prominence and anxiety.

# The best Smoke Shop 2023/04/24 18:42 Davidbob
I walked into the headshop with a include of snooping and trepidation. The walls were lined with shelves and pageantry cases filled with colorful pipes, bongs, and other smoking accessories https://everythingfor420.com/collections/bongs. The air was solid with the batty about bon-bon smell of incense, and reggae music played softly in the background. A clubby salesperson greeted me and asked if I needed mitigate finding anything. I admitted that I was a moment overwhelmed during the set, and he offered to show me some of their best-selling items. As he pulled out a graceful, silver vaporizer, he explained how it worked and the benefits of using it throughout traditional smoking methods. He also showed me a variety of flavored rolling papers and a grinder with a shameless design. I ended up leaving with a occasional items, sensibility stimulated to struggle exposed my fashionable purchases. The taste had been surprisingly enjoyable, and I was impressed nearby the well-educated and friendly staff. I couldn't be put on ice to come rear and inquire more of what the headshop had to offer.

# I tried CBD gummies on the first heyday and I was pleasantly surprised 2023/05/05 1:52 hhc gummies
I tried CBD gummies quest of the oldest rhythm and I was pleasantly surprised. They tasted unforgivable and helped me determine more at ease and at ease. I suffer from inveterate suffering and establish that the gummies or helped to alleviate some of my inconvenience without any negative side effects. I last will and testament surely be purchasing these gummies again and would approve them to anyone looking for a natural forward movement to manage cramp and stress.

# diflucan over the counter https://overthecounter.pro/# 2023/05/08 22:55 OtcJikoliuj
diflucan over the counter https://overthecounter.pro/#

# best ed medications 2023/05/14 22:44 MichaelExcup
http://edpills.pro/# ed medications list

# canadian pharmacies https://pillswithoutprescription.pro/# 2023/05/15 3:44 PillsPresc
canadian pharmacies https://pillswithoutprescription.pro/#

# buy ed pills 2023/05/16 4:54 Mickeynix
http://edpills.pro/# buy ed pills online

# canadian pharmacies compare 2023/06/06 23:26 JosephBab
https://cytotecpills.pro/# Misoprostol 200 mg buy online

# The most outstanding seeds 2023/06/08 20:17 Jeromepieve
In fashion cannabis growers are spoiled on the side of choice. https://trilogeneseeds.com/collections/greenhouse-seeds There are more strains on the trade in than ever in the past, and numerous growers procure entranced a refinement to the stylish and improved option of autoflowers. Autoflowering genetics contain a everything to offer. There are varieties acme in CBD, screaming in THC, and those with a cordial direct of both. That’s not to allusion the mad inconsistency in terpene profiles. But it’s not all sunshine and roses. Autoflower strains cause a presenter of advantages, but they also stock disadvantages that move some growers off.

# impotence pills 2023/06/10 16:11 BennySpuse
https://edpillsfd.com/# cheap ed pills

# What is the CBD products? 2023/06/13 23:52 JosephTop
I recently tried CBD Products for the treatment of the triumph epoch and I ought to utter, I'm impressed with the results. I felt more blas? and at https://www.trythecbd.com/full-spectrum-cbd-oil/ artlessness, and my anxiety was significantly reduced. The CBD gummies tasted pronounced and were casual to consume. I'll unquestionably be using them again and would counsel them to anyone looking after a expected modus vivendi = 'lifestyle' to alleviate stress and anxiety.

# sildenafil 20 mg tablets price 2023/06/27 22:15 DavidPaync
http://fastpills.pro/# best canadian drug prices

# The best CBD for Life 2023/07/11 7:39 Edwardfilky
I recently tried https://cbdforlife.us/products/cbd-foot-cream in search the foremost moment and I must hint, I'm impressed with the results. I felt more tranquil and at peace, and my eagerness was significantly reduced. The gummies tasted mammoth and were undisturbed to consume. I'll assuredly be using them again and would vouch for them to anyone looking suitable a unembellished course to alleviate stress and anxiety.

# best dating site usa 2023/08/09 13:22 WayneGurry
dating sim: http://datingtopreview.com/# - meet me dating site

# cytotec pills buy online 2023/08/29 3:36 Georgejep
http://misoprostol.guru/# cytotec online

# acquistare farmaci senza ricetta 2023/09/25 18:03 Archieonelf
https://farmaciabarata.pro/# farmacia 24h

# best over the counter ed pills https://edpillsotc.store/# - best otc ed pills 2023/10/08 1:20 EdPills
best over the counter ed pills https://edpillsotc.store/# - best otc ed pills

# ed pills for sale 2023/10/08 9:16 BobbyAtobe
They have strong partnerships with pharmacies around the world. https://doxycyclineotc.store/# doxycycline tablets canada

# buy doxycycline tablets 100mg 2023/10/08 10:33 GaylordPah
Consistent excellence across continents. http://edpillsotc.store/# over the counter erectile dysfunction pills

# Paxlovid buy online 2023/10/24 11:34 LarryNef
http://valtrex.auction/# where can i buy valtrex

# paxlovid india 2023/10/25 11:59 LarryNef
http://paxlovid.bid/# buy paxlovid online

# UK Front-page news Core: Arrest Conversant with on Statesmanship, Succinctness, Learning & More 2024/03/29 11:32 Tommiemayox
Appreciated to our dedicated stage for staying briefed beside the latest story from the Agreed Kingdom. We understand the importance of being well-informed far the happenings in the UK, whether you're a citizen, an expatriate, or purely interested in British affairs. Our encyclopaedic coverage spans across a number of domains including politics, concision, savoir vivre, extravaganza, sports, and more.

In the kingdom of politics, we abide by you updated on the intricacies of Westminster, covering ordered debates, sway policies, and the ever-evolving prospect of British politics. From Brexit negotiations and their import on barter and immigration to residential policies affecting healthcare, education, and the atmosphere, we plan for insightful analysis and propitious updates to refrain from you navigate the complex sphere of British governance - https://newstopukcom.com/discover-the-miracle-of-lb-slimming-gummies-uk/.

Economic despatch is required in compensation understanding the monetary vibration of the nation. Our coverage includes reports on superstore trends, establishment developments, and cost-effective indicators, donation valuable insights in place of investors, entrepreneurs, and consumers alike. Whether it's the latest GDP figures, unemployment rates, or corporate mergers and acquisitions, we try hard to deliver precise and applicable report to our readers.

# Try cannabis products! 2024/03/31 4:20 Cannabis Tinctures
Trying cannabis products for the earliest time was an eye-opening experience. The diminution and euphoria were unexpected but welcomed. It enhanced my sensory perception and sparked a newfound acknowledgement in support of music and art. At any rate, the highly-strung hunger caught me mad guard. Inclusive, it was a historic introduction to a advanced humanity of sensations.

# buy cytotec over the counter https://cytotec.club/ cytotec buy online usa 2024/04/28 2:04 Cytotec
buy cytotec over the counter https://cytotec.club/ cytotec buy online usa

# Infos recentes sur les figures mediatiques africaines dans les medias et la tele-realite 2024/09/21 6:22 BrianMub
Bienvenue sur notre blog, votre lieu ultime pour les nouvelles sur les stars africaines du monde des plateformes mediatiques et des emissions de television-realite https://mediaeventhub.africa/rico-swavey-musicien-aux-multiples-talents-et-star.html ! Des mouvements recents dans l’industrie du divertissement africain aux potins les plus epices sur les vedettes, nous vous mettrons a jour de toutes les anecdotes palpitantes a travers le Afrique. Qu'il s'agisse de alliances musicales revolutionnaires, de temps forts dans les emissions de tele-realite, ou de parcours personnels emouvants de vos stars preferees, nous surveillons tout. La scene du show business en Afrique foisonne de talents, et notre blog est la pour vous connecter aux icones qui redefinissent l'industrie.

Les emissions de tele-realite africaines ont envahi le monde, exposant la diversite culturelle, la creativite et l'sincerite uniques du paysage africain. Des emissions comme « Big Brother Naija », « Les Epouses Reelles de Lagos » et « Ile de la Tentation Afrique du Sud » suscitent l'interet de des publics massives, suscitant des conversations et federant des fans bien a l'exterieur de l’Afrique. Nous nous immergeons dans les histoires, les liens et les moments inoubliables qui font de ces programmes des essentiels a la tele. Notre blog ne se restreint pas a commenter stars, mais eclaire le role culturel de ces series, refletant l’empreinte croissante de la culture populaire africaine a l’echelle planetaire.

Notre blog celebre egalement les personnes du monde mediatique et les nouvelles figures qui font parler d’eux en Afrique. Des comediens brillants aux animateurs populaires, en passant par les stars du web sur les reseaux sociaux, nous mettons a l'honneur les performances de ceux qui transforment le divertissement sur le continent. Par exemple des performances primees dans les productions de Nollywood, des interpretations de premier plan dans des fictions mondiales ou des actes courageux dans des videoclips, nous vous fournissons des entretiens uniques et des chroniques liees a la notoriete. Vous trouverez des focus de personnes marquantes comme Davido, qui ont non seulement conquis les audiences africaines, mais aussi obtenu une notoriete internationale.

Gardez le contact avec nous pour les dernieres nouvelles et nouveautes en primeur sur vos stars africaines preferees. Notre blog est un point de rencontre pour les amoureux du showbiz qui cherchent a etre au courant avec les drames du showbiz, les programmes recents et les revolutions sociales qui remodelent l'industrie. Tant pour un un fidele amateur de la pop culture africaine ou un lecteur occasionnel des actualites du monde des stars, notre blog vous garantit de vous mettre a jour, rendre joyeux et inspire par le milieu en ebullition des canaux et spectacles de realite televisee en Afrique.

Post Feedback

タイトル
名前
Url:
コメント