[Docs]: Need a complete documented list of capabilities

microsoft / win32-app-isolation

Tools and documentation for Win32 app isolation

MIT License

1.26k stars 33 forks source link

[Docs]: Need a complete documented list of capabilities #63

Open mikehearn opened 6 months ago

mikehearn commented 6 months ago

Links

No response

Description

The ACP tool is fine, but some of us follow the Old Ways and write our permission lists by hand. For this we need to understand what capability names exist, and what they do. The docs currently don't cover this.

awsomearvinder commented 5 months ago

fwiw I found this exists, which are the capabilities exposed by the windows API:

https://learn.microsoft.com/en-us/windows/win32/secauthz/capability-sid-constants

cchavez-msft commented 5 months ago

Hi, @mikehearn.

Thank you for your input. Yes, currently we don't have docs that cover this, but the information will be available soon.