apply dacl entries with PROTECTED_DACL_SECURITY_INFORMATION so inheritable ACEs can be removed

trailofbits / windows-acl

Rust crate to simplify Windows ACL operations

https://blog.trailofbits.com/2018/08/23/introducing-windows-acl-working-with-acls-in-rust/

MIT License

18 stars 7 forks source link

apply dacl entries with PROTECTED_DACL_SECURITY_INFORMATION so inheritable ACEs can be removed #2

Closed mwrock closed 4 years ago

mwrock commented 6 years ago

I noticed that when removing ACEs that are inherited, the ACE remains even though removed is incremented. By adding PROTECTED_DACL_SECURITY_INFORMATION to the SetNamedSecurityInfoW flags, these ACEs are actually removed.

Signed-off-by: mwrock matt@mattwrock.com

CLAassistant commented 6 years ago

All committers have signed the CLA.