发明申请
US20070005961A1 Providing user on computer operating system with full privileges token and limited privileges token 有权
在计算机操作系统上为用户提供完全权限令牌和有限权限令牌

Providing user on computer operating system with full privileges token and limited privileges token
摘要:
An operating system for a computing device has a first session for a user that includes a first base process that has a first privileges token attached thereto. The first privileges token includes substantially a full set of privileges of the user on the operating system. The operating system also has a second session for the user that includes a second base process that has a second privileges token attached thereto. The second privileges token is derived from the first privileges token and includes only a minimum set of privileges of the user on the operating system. Thus, the second, limited token does not have all privileges associated with the first, full token but instead has a limited set of privileges and not extra privileges that could be employed to take actions that would be harmful, deceptive, or malicious.
信息查询
0/0