<html><head><style type="text/css"><!-- DIV {margin:0px} --></style></head><body><div style="font-family:arial, helvetica, sans-serif;font-size:10pt"><div style="font-family: arial,helvetica,sans-serif; font-size: 10pt;">I have extensive win32 kernel programming experience and can probably write the patch for this (especially since I know exactly what Lee is talking about). Let me set up a Tor dev environment and see if I can at least get that far...<br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Original Message ----<br>From: Lee Fisher <blibbet@gmail.com><br>To: Nick Mathewson <nickm@freehaven.net>; or-talk@freehaven.net<br>Sent: Tuesday, August 8, 2006 8:03:31 PM<br>Subject: Re: ACLs null on NT<br><br><div>-----BEGIN PGP SIGNED MESSAGE-----<br>Hash: SHA1<br><br>Read "19 Deadly Sins of Software Security", chapter 12 is on this auth<br>issue. It is written for a Unix person, to understand also having
to<br>address NT ACLs.<br><br>Get the Platform SDK (now called the Windows SDK). Grep through the<br>samples for SECURITY_DECRIPTOR, among other things. There are a few<br>simple samples that setup an ACL for a handle.<br><br>Read "Secure Programming Cookbook", chapter 2 (access control), 2<br>patterns, 1 for Unix, 1 for NT.<br><br>Again, this is just untested observation. I am _not_ sitting here in a<br>debugger on an NT box, reading all of your Tor data.... :-)<br><br>Please put "strong Windows skills" on the RFP for the students!<br><br>Lee<br><br>> Hi, Lee! This looks like good research. There's one big problem,<br>> though: our windows skills are weak. We'll either need a patch for<br>> this stuff, or more specific instructions about what exactly to do, or<br>> this could take a very long time to fix.<br><br>-----BEGIN PGP
SIGNATURE-----<br><br>iEYEARECAAYFAkTZJkAACgkQw3D+nSm51yhzpwCgtBB+NuGd5JRBGiBjz7JJv9EI<br>0o4AnjtPf7Dw0lzPGz7UoI1IJwtZPjET<br>=zmc/<br>-----END PGP SIGNATURE-----<br></div></div><br></div></div></body></html>