PROCESS_VM_WRITE questions RRS feed

  • Question

  • Hello,


    I hope i'm posting this question in the right forum.

    I'm kinda new to windows security, and i was wondering if it would be possible to protect my process by somehow removing the PROCESS_VM_WRITE access for any other processes for any user (including admin), on both vista and XP ? I heard about the SeDebugPrivilege function, something to be worried about?

    Or is it simply impossible?


    Thanks in advance,




    Thursday, August 2, 2007 12:31 PM

All replies

  • Processes with the debug privilege will be able to bypass the DACL.

    Also, the parent of your process will have that right too.

    Monday, August 13, 2007 1:30 AM